Generated by JEB on 2019/08/01

PE: C:\Windows\System32\bdeunlock.exe Base=0x140000000 SHA-256=939D06CAB2527EFCDC3AB98FC450452552AC99C45A312095AEFCBA6A2549D9DA
PDB: bdeunlock.pdb GUID={7D2B3B5B-80D1-441A-D55B43B5ED2ED3F1} Age=1

624 located named symbols:
0x14002B9D0: "NtQuerySystemInformation" ??_C@_0BJ@NDLOPGCH@NtQuerySystemInformation?$AA@
0x140028F18: "main" ??_C@_19NACPGGMO@?$AAm?$AAa?$AAi?$AAn?$AA?$AA@
0x1400259EC: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140028E78: "__cdecl GUID_04124b20_82c6_4229_b109_fd9ed4662b53" _GUID_04124b20_82c6_4229_b109_fd9ed4662b53
0x140028F60: "Software\Microsoft\Windows\Curre" ??_C@_1HI@BEGLNFHN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140025E90: "__cdecl FindPESection" _FindPESection
0x140025538: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x140028AA8: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1400289B8: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x14002CBF0: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1400285B8: "__cdecl _imp_?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ" __imp_?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ
0x14000258C: "private: long __cdecl CBdeUnlockUIController::_ConfigureElementsDynamically(void) __ptr64" ?_ConfigureElementsDynamically@CBdeUnlockUIController@@AEAAJXZ
0x1400283A0: "const CVolumeListener::`vftable'" ??_7CVolumeListener@@6B@
0x140029280: "Software\Policies\Microsoft\FVE" ??_C@_1EA@NGGADBLF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAF?$AAV?$AAE?$AA?$AA@
0x1400247D0: "__cdecl wsetargv" _wsetargv
0x1400247B0: "struct HBITMAP__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateDIBSection(struct HDC__ * __ptr64,struct tagBITMAPINFO const * __ptr64,unsigned int,void * __ptr64 * __ptr64,void * __ptr64,unsigned long)" ?CreateDIBSection@WARBIRD_DELAY_LOAD@@YAPEAUHBITMAP__@@PEAUHDC__@@PEBUtagBITMAPINFO@@IPEAPEAXPEAXK@Z
0x1400248D4: "public: __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::operator unsigned short * __ptr64 * __ptr64(void)const __ptr64" ??B?$SP@PEAGV?$SP_MEM@PEAG@@@@QEBAPEAPEAGXZ
0x14002F1D0: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140028808: "__cdecl _imp_RaiseException" __imp_RaiseException
0x1400248D4: "public: unsigned long * __ptr64 __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::GetPtrAs<unsigned long>(void)const __ptr64" ??$GetPtrAs@K@?$SP@EV?$SP_HLOCAL@E@@@@QEBAPEAKXZ
0x1400243B0: "[thunk]:public: virtual unsigned long __cdecl CBdeUnlockUIController::Release`adjustor{8}' (void) __ptr64" ?Release@CBdeUnlockUIController@@W7EAAKXZ
0x140028A40: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140028680: "__cdecl _imp_InitProcessPriv" __imp_InitProcessPriv
0x140002554: "private: long __cdecl CBdeUnlockUIController::_HideElement(unsigned short const * __ptr64) __ptr64" ?_HideElement@CBdeUnlockUIController@@AEAAJPEBG@Z
0x140001340: "public: class BuiVolume & __ptr64 __cdecl BuiVolume::operator=(class BuiVolume const & __ptr64) __ptr64" ??4BuiVolume@@QEAAAEAV0@AEBV0@@Z
0x1400024A8: "private: long __cdecl CBdeUnlockUIController::_FindDescendentCheckNull(class DirectUI::Element * __ptr64 * __ptr64,unsigned short const * __ptr64) __ptr64" ?_FindDescendentCheckNull@CBdeUnlockUIController@@AEAAJPEAPEAVElement@DirectUI@@PEBG@Z
0x1400286F0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x140026067: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x140029500: "__cdecl GUID_4da31a12_cc32_49bc_b2cc_060dbcf2bafc" _GUID_4da31a12_cc32_49bc_b2cc_060dbcf2bafc
0x1400254F8: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x140028968: api-ms-win-core-winrt-string-l1-1-0_NULL_THUNK_DATA
0x140028550: "__cdecl _imp_?UnlockWithKey@BuiVolume@@QEAAJPEBGPEAH@Z" __imp_?UnlockWithKey@BuiVolume@@QEAAJPEBGPEAH@Z
0x140026150: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140028878: SHELL32_NULL_THUNK_DATA
0x1400247B0: "struct HDC__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetDC(struct HWND__ * __ptr64)" ?GetDC@WARBIRD_DELAY_LOAD@@YAPEAUHDC__@@PEAUHWND__@@@Z
0x140029520: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x1400287E8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140019164: "public: long __cdecl CBdeUnlockUIController::CreateAndShowToast(void) __ptr64" ?CreateAndShowToast@CBdeUnlockUIController@@QEAAJXZ
0x140028698: "__cdecl _imp_InitGadgets" __imp_InitGadgets
0x1400010A0: "public: bool __cdecl VolumeFveStatus::HasPassphraseProtector(void)const __ptr64" ?HasPassphraseProtector@VolumeFveStatus@@QEBA_NXZ
0x140028028: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupEventHandler>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupEventHandler@@@WRL@Microsoft@@6B@
0x140002280: "private: void __cdecl CBdeUnlockUIController::_OnRecoveryPasswordTextChanged(class DirectUI::Element * __ptr64,class DirectUI::TouchEdit2 * __ptr64) __ptr64" ?_OnRecoveryPasswordTextChanged@CBdeUnlockUIController@@AEAAXPEAVElement@DirectUI@@PEAVTouchEdit2@3@@Z
0x1400285C8: "__cdecl _imp_?SetLayoutPos@Element@DirectUI@@QEAAJH@Z" __imp_?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::EnumDisplaySettingsW(unsigned short const * __ptr64,unsigned long,struct _devicemodeW * __ptr64)" ?EnumDisplaySettingsW@WARBIRD_DELAY_LOAD@@YAHPEBGKPEAU_devicemodeW@@@Z
0x140028778: "__cdecl _imp_GetUserPreferredUILanguages" __imp_GetUserPreferredUILanguages
0x140028868: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x14002F8E0: "__cdecl commode" _commode
0x140028800: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x14002F988: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um
0x14002BA00: CLSID_PopupWindowFactory
0x14002B9F0: CLSID_AutoPlayDirect
0x14001869C: "private: void __cdecl CBdeUnlockUIController::_ShowSmartCardError(long) __ptr64" ?_ShowSmartCardError@CBdeUnlockUIController@@AEAAXJ@Z
0x1400290F8: "smartcardelement" ??_C@_1CC@EJCPLOIN@?$AAs?$AAm?$AAa?$AAr?$AAt?$AAc?$AAa?$AAr?$AAd?$AAe?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::GetObjectW(void * __ptr64,int,void * __ptr64)" ?GetObjectW@WARBIRD_DELAY_LOAD@@YAHPEAXH0@Z
0x1400287F0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x1400247B0: "void * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetCurrentObject(struct HDC__ * __ptr64,unsigned int)" ?GetCurrentObject@WARBIRD_DELAY_LOAD@@YAPEAXPEAUHDC__@@I@Z
0x140028F28: "DisplayToastAtBottom" ??_C@_1CK@HIDKIMPD@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAT?$AAo?$AAa?$AAs?$AAt?$AAA?$AAt?$AAB?$AAo?$AAt?$AAt?$AAo?$AAm?$AA?$AA@
0x140028AB8: ole32_NULL_THUNK_DATA
0x140028820: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140029120: "usbelement" ??_C@_1BG@EKHNNKMI@?$AAu?$AAs?$AAb?$AAe?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x1400247B0: "struct HBRUSH__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateSolidBrush(unsigned long)" ?CreateSolidBrush@WARBIRD_DELAY_LOAD@@YAPEAUHBRUSH__@@K@Z
0x140023A90: "public: virtual long __cdecl CGenericPopupCommand::get_Label(unsigned short * __ptr64 * __ptr64) __ptr64" ?get_Label@CGenericPopupCommand@@UEAAJPEAPEAG@Z
0x140025D70: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140028AC8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1400248D4: "public: void * __ptr64 __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::GetPtrAs<void>(void)const __ptr64" ??$GetPtrAs@X@?$SP@EV?$SP_MEM@E@@@@QEBAPEAXXZ
0x1400285C0: "__cdecl _imp_?GetEncodedContentString@Element@DirectUI@@QEAAJPEAG_K@Z" __imp_?GetEncodedContentString@Element@DirectUI@@QEAAJPEAG_K@Z
0x14002F8EC: "__cdecl fmode" _fmode
0x1400292D8: "panelsmartcardunlock" ??_C@_1CK@GCGHMFLE@?$AAp?$AAa?$AAn?$AAe?$AAl?$AAs?$AAm?$AAa?$AAr?$AAt?$AAc?$AAa?$AAr?$AAd?$AAu?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140028748: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x1400286B0: "__cdecl _imp_FveCloseVolume" __imp_FveCloseVolume
0x1400287E0: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x1400248D4: "public: unsigned short * __ptr64 __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::GetPtrAs<unsigned short>(void)const __ptr64" ??$GetPtrAs@G@?$SP@EV?$SP_MEM@E@@@@QEBAPEAGXZ
0x140001364: wWinMain
0x140028958: "__cdecl _imp_WindowsGetStringRawBuffer" __imp_WindowsGetStringRawBuffer
0x1400243A0: "[thunk]:public: virtual long __cdecl CBdeUnlockUIController::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CBdeUnlockUIController@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x14002BA78: FOLDERID_ComputerFolder
0x14002F1F0: "unsigned char * `WarbirdUmGetEncryptionCipher'::`2'::EncryptionCipher" ?EncryptionCipher@?1??WarbirdUmGetEncryptionCipher@@9@4PAEA
0x140027000: MsftWatermark
0x1400288F8: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x1400285A0: "__cdecl _imp_?GetClassInfoPtr@TouchEdit2@DirectUI@@SAPEAUIClassInfo@2@XZ" __imp_?GetClassInfoPtr@TouchEdit2@DirectUI@@SAPEAUIClassInfo@2@XZ
0x140029260: "FDVRecoveryKey" ??_C@_1BO@DABGNEIF@?$AAF?$AAD?$AAV?$AAR?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AAK?$AAe?$AAy?$AA?$AA@
0x140029138: "panelrecoveryunlock" ??_C@_1CI@GFCCEGNM@?$AAp?$AAa?$AAn?$AAe?$AAl?$AAr?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AAu?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140025DCE: "__cdecl XcptFilter" _XcptFilter
0x140028AD0: "__cdecl _xc_a" __xc_a
0x1400290B0: "panelpwdunlock" ??_C@_1BO@JPJFILOB@?$AAp?$AAa?$AAn?$AAe?$AAl?$AAp?$AAw?$AAd?$AAu?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140024780: "public: virtual void __cdecl CSafeElementListenerCB::OnListenedPropertyChanged(class DirectUI::Element * __ptr64,struct DirectUI::PropertyInfo const * __ptr64,int,class DirectUI::Value * __ptr64,class DirectUI::Value * __ptr64) __ptr64" ?OnListenedPropertyChanged@CSafeElementListenerCB@@UEAAXPEAVElement@DirectUI@@PEBUPropertyInfo@3@HPEAVValue@3@2@Z
0x140023CDC: "class Microsoft::WRL::ComPtr<class CGenericPopupCommand> __cdecl Microsoft::WRL::Details::Make<class CGenericPopupCommand,struct IPopupCommandHandler * __ptr64 & __ptr64>(struct IPopupCommandHandler * __ptr64 & __ptr64)" ??$Make@VCGenericPopupCommand@@AEAPEAUIPopupCommandHandler@@@Details@WRL@Microsoft@@YA?AV?$ComPtr@VCGenericPopupCommand@@@12@AEAPEAUIPopupCommandHandler@@@Z
0x140024BC0: "public: static long __cdecl CFveDriveType::GetFveVolumePath(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long)" ?GetFveVolumePath@CFveDriveType@@SAJPEBGPEAGK@Z
0x140023D94: "int __cdecl IsClassOf<class DirectUI::TouchHyperLink>(class DirectUI::Element * __ptr64)" ??$IsClassOf@VTouchHyperLink@DirectUI@@@@YAHPEAVElement@DirectUI@@@Z
0x1400248D4: "public: char * __ptr64 __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::GetPtrAs<char>(void)const __ptr64" ??$GetPtrAs@D@?$SP@EV?$SP_MEM@E@@@@QEBAPEADXZ
0x14002CCA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0
0x140028720: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140028620: "__cdecl _imp_?MultipleClick@TouchButton@DirectUI@@SA?AVUID@@XZ" __imp_?MultipleClick@TouchButton@DirectUI@@SA?AVUID@@XZ
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::InvalidateRect(struct HWND__ * __ptr64,struct tagRECT const * __ptr64,int)" ?InvalidateRect@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEBUtagRECT@@H@Z
0x140028E88: "__cdecl GUID_6cd0e74e_ee65_4489_9ebf_ca43e87ba637" _GUID_6cd0e74e_ee65_4489_9ebf_ca43e87ba637
0x140028D40: "unsigned short const * const RuntimeClass_Windows_UI_Notifications_ToastNotification" ?RuntimeClass_Windows_UI_Notifications_ToastNotification@@3QBGB
0x140028960: "__cdecl _imp_WindowsCreateStringReference" __imp_WindowsCreateStringReference
0x14002F98C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlimvihglmvUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@fve_common_um" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlimvihglmvUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@fve_common_um
0x14002F000: "void * __ptr64 * WARBIRD::g_FuncAddress" ?g_FuncAddress@WARBIRD@@3PAPEAXA
0x1400247B0: "struct HDC__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetDCEx(struct HWND__ * __ptr64,struct HRGN__ * __ptr64,unsigned long)" ?GetDCEx@WARBIRD_DELAY_LOAD@@YAPEAUHDC__@@PEAUHWND__@@PEAUHRGN__@@K@Z
0x140028570: "__cdecl _imp_?Init@BuiVolume@@QEAAJPEAG@Z" __imp_?Init@BuiVolume@@QEAAJPEAG@Z
0x140024834: "public: void __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Reset(void) __ptr64" ?Reset@?$SP@KV?$SP_MEM@K@@@@QEAAXXZ
0x14002B398: "unsigned short const * const `public: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetAllPreferredStrings(unsigned short * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64 * __ptr64,int * __ptr64,struct _LANG_FONT_NAMES * __ptr64)'::`2'::wStringIds" ?wStringIds@?1??GetAllPreferredStrings@?$CUxDisplayStringsT@VCEmptyType@@@@SAJPEAGIPEAPEAPEAGPEAHPEAU_LANG_FONT_NAMES@@@Z@4QBGB
0x140025D0C: "__cdecl callnewh" _callnewh
0x1400248C4: "public: unsigned short * __ptr64 * __ptr64 __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Detach(void) __ptr64" ?Detach@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAPEAPEAGXZ
0x1400285A8: "__cdecl _imp_?GetClassInfoPtr@TouchCheckBox@DirectUI@@SAPEAUIClassInfo@2@XZ" __imp_?GetClassInfoPtr@TouchCheckBox@DirectUI@@SAPEAUIClassInfo@2@XZ
0x1400247E0: "int __cdecl WARBIRD_DELAY_LOAD::MulDiv(int,int,int)" ?MulDiv@WARBIRD_DELAY_LOAD@@YAHHHH@Z
0x140026116: memcpy
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::FillRect(struct HDC__ * __ptr64,struct tagRECT const * __ptr64,struct HBRUSH__ * __ptr64)" ?FillRect@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEBUtagRECT@@PEAUHBRUSH__@@@Z
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::DeleteObject(void * __ptr64)" ?DeleteObject@WARBIRD_DELAY_LOAD@@YAHPEAX@Z
0x140028970: "__cdecl _imp_memset" __imp_memset
0x140002150: "public: virtual void __cdecl CBdeUnlockUIController::OnListenedInput(class DirectUI::Element * __ptr64,struct DirectUI::InputEvent * __ptr64) __ptr64" ?OnListenedInput@CBdeUnlockUIController@@UEAAXPEAVElement@DirectUI@@PEAUInputEvent@3@@Z
0x14002604F: "__cdecl initterm" _initterm
0x1400254D0: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x14002F9B8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140028728: "__cdecl _imp_Sleep" __imp_Sleep
0x1400288E0: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x140028B00: "__cdecl _xi_z" __xi_z
0x140024780: "protected: virtual void __cdecl CExitOnVolumeRemove::OnBeforeExit(void) __ptr64" ?OnBeforeExit@CExitOnVolumeRemove@@MEAAXXZ
0x140001100: "public: bool __cdecl VolumeFveStatus::IsOn(void)const __ptr64" ?IsOn@VolumeFveStatus@@QEBA_NXZ
0x140028718: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140023BE0: "public: virtual long __cdecl CGenericPopupCommand::get_ID(unsigned int * __ptr64) __ptr64" ?get_ID@CGenericPopupCommand@@UEAAJPEAI@Z
0x140028A60: "__cdecl _imp_wcscmp" __imp_wcscmp
0x140028760: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x1400247B0: "struct HBITMAP__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateCompatibleBitmap(struct HDC__ * __ptr64,int,int)" ?CreateCompatibleBitmap@WARBIRD_DELAY_LOAD@@YAPEAUHBITMAP__@@PEAUHDC__@@HH@Z
0x1400012B0: "public: unsigned long __cdecl VolumeFveStatus::GetStatusFlags(void)const __ptr64" ?GetStatusFlags@VolumeFveStatus@@QEBAKXZ
0x14002605B: "__cdecl _C_specific_handler" __C_specific_handler
0x1400252C0: "public: virtual void __cdecl CExitOnVolumeRemove::RemoveCallback(void) __ptr64" ?RemoveCallback@CExitOnVolumeRemove@@UEAAXXZ
0x140023BF0: "public: virtual long __cdecl CGenericPopupCommand::get_Handler(struct IPopupCommandHandler * __ptr64 * __ptr64) __ptr64" ?get_Handler@CGenericPopupCommand@@UEAAJPEAPEAUIPopupCommandHandler@@@Z
0x1400286D0: FVEAPI_NULL_THUNK_DATA
0x140028948: "__cdecl _imp_RoGetActivationFactory" __imp_RoGetActivationFactory
0x140028928: api-ms-win-core-winrt-error-l1-1-0_NULL_THUNK_DATA
0x140028860: "__cdecl _imp_SHChangeNotification_Unlock" __imp_SHChangeNotification_Unlock
0x140028788: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140028938: api-ms-win-core-winrt-error-l1-1-1_NULL_THUNK_DATA
0x14002F990: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@ngscb_common_um" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@ngscb_common_um
0x1400247B0: "struct HWND__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetDesktopWindow(void)" ?GetDesktopWindow@WARBIRD_DELAY_LOAD@@YAPEAUHWND__@@XZ
0x140028890: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x140001260: "public: bool __cdecl VolumeFveStatus::IsEDriveVolume(void)const __ptr64" ?IsEDriveVolume@VolumeFveStatus@@QEBA_NXZ
0x140024934: "unsigned char * __ptr64 __cdecl MemoryAllocT<unsigned char>(unsigned __int64)" ??$MemoryAllocT@E@@YAPEAE_K@Z
0x140024934: "unsigned short * __ptr64 __cdecl MemoryAllocT<unsigned short>(unsigned __int64)" ??$MemoryAllocT@G@@YAPEAG_K@Z
0x140024934: "unsigned long * __ptr64 __cdecl MemoryAllocT<unsigned long>(unsigned __int64)" ??$MemoryAllocT@K@@YAPEAK_K@Z
0x140029070: "wrongvolume" ??_C@_1BI@LJGGAPLN@?$AAw?$AAr?$AAo?$AAn?$AAg?$AAv?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1400260A8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::LCIDToLocaleName(unsigned long,unsigned short * __ptr64,int,unsigned long)" ?LCIDToLocaleName@WARBIRD_DELAY_LOAD@@YAHKPEAGHK@Z
0x140024450: "private: static unsigned long __cdecl CBackgroundUnlocker::UnlockThreadEntry(void * __ptr64)" ?UnlockThreadEntry@CBackgroundUnlocker@@CAKPEAX@Z
0x1400287B0: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x14002F920: "struct WARBIRD::_MODULE_INFO * WARBIRD::g_arModuleInfo" ?g_arModuleInfo@WARBIRD@@3PAU_MODULE_INFO@1@A
0x1400288B0: "__cdecl _imp_RemovePropW" __imp_RemovePropW
0x140029578: "__cdecl GUID_00000114_0000_0000_c000_000000000046" _GUID_00000114_0000_0000_c000_000000000046
0x1400248D4: "public: __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::operator unsigned char * __ptr64(void)const __ptr64" ??B?$SP@EV?$SP_MEM@E@@@@QEBAPEAEXZ
0x140001310: "public: class VolumeFveStatus & __ptr64 __cdecl VolumeFveStatus::operator=(class VolumeFveStatus &&) __ptr64" ??4VolumeFveStatus@@QEAAAEAV0@$$QEAV0@@Z
0x1400248D4: "public: __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::operator unsigned long * __ptr64(void)const __ptr64" ??B?$SP@KV?$SP_MEM@K@@@@QEBAPEAKXZ
0x1400012E0: "public: unsigned long * __ptr64 * __ptr64 __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::operator&(void) __ptr64" ??I?$SP@KV?$SP_MEM@K@@@@QEAAPEAPEAKXZ
0x140025E83: "__cdecl amsg_exit" _amsg_exit
0x140028A20: "__cdecl _imp__callnewh" __imp__callnewh
0x140024340: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommandHandler>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommandHandler@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::GdiGradientFill(struct HDC__ * __ptr64,struct _TRIVERTEX * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long)" ?GdiGradientFill@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEAU_TRIVERTEX@@KPEAXKK@Z
0x140018884: "private: void __cdecl CBdeUnlockUIController::_ShowPassphraseError(long) __ptr64" ?_ShowPassphraseError@CBdeUnlockUIController@@AEAAXJ@Z
0x14002455C: "public: virtual __cdecl CBackgroundUnlocker::~CBackgroundUnlocker(void) __ptr64" ??1CBackgroundUnlocker@@UEAA@XZ
0x140024A08: "__cdecl TlgDefineProvider_annotation__Tlgg_hBitLockerBcdUpdateProviderProv" _TlgDefineProvider_annotation__Tlgg_hBitLockerBcdUpdateProviderProv
0x140028880: "__cdecl _imp_QISearch" __imp_QISearch
0x140025050: "private: static __int64 __cdecl CVolumeListener::NotifySinkProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?NotifySinkProc@CVolumeListener@@CA_JPEAUHWND__@@I_K_J@Z
0x140024620: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommand>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommand@@@Details@WRL@Microsoft@@UEAAKXZ
0x1400247B0: "void * __ptr64 __cdecl WARBIRD_DELAY_LOAD::SelectObject(struct HDC__ * __ptr64,void * __ptr64)" ?SelectObject@WARBIRD_DELAY_LOAD@@YAPEAXPEAUHDC__@@PEAX@Z
0x140002B00: "private: long __cdecl CBdeUnlockUIController::_OnDismissCommand(struct IPopupWindow * __ptr64) __ptr64" ?_OnDismissCommand@CBdeUnlockUIController@@AEAAJPEAUIPopupWindow@@@Z
0x140019744: "private: static bool __cdecl CBdeUnlockUIController::_IsPremiumSku(void)" ?_IsPremiumSku@CBdeUnlockUIController@@CA_NXZ
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::GetDIBits(struct HDC__ * __ptr64,struct HBITMAP__ * __ptr64,unsigned int,unsigned int,void * __ptr64,struct tagBITMAPINFO * __ptr64,unsigned int)" ?GetDIBits@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEAUHBITMAP__@@IIPEAXPEAUtagBITMAPINFO@@I@Z
0x140028D0F: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x140028628: "__cdecl _imp_?Click@TouchButton@DirectUI@@SA?AVUID@@XZ" __imp_?Click@TouchButton@DirectUI@@SA?AVUID@@XZ
0x140028670: "__cdecl _imp_UnInitThread" __imp_UnInitThread
0x140028A30: "__cdecl _imp_exit" __imp_exit
0x140029510: "__cdecl GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90" _GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90
0x1400010D0: "public: bool __cdecl VolumeFveStatus::IsOsCriticalVolume(void)const __ptr64" ?IsOsCriticalVolume@VolumeFveStatus@@QEBA_NXZ
0x1400011C0: "public: bool __cdecl VolumeFveStatus::IsSecure(void)const __ptr64" ?IsSecure@VolumeFveStatus@@QEBA_NXZ
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::DrawTextExW(struct HDC__ * __ptr64,unsigned short * __ptr64,int,struct tagRECT * __ptr64,unsigned int,struct tagDRAWTEXTPARAMS * __ptr64)" ?DrawTextExW@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEAGHPEAUtagRECT@@IPEAUtagDRAWTEXTPARAMS@@@Z
0x140028188: "const CBdeUnlockUIController::`vftable'{for `Windows::Foundation::ITypedEventHandler<class Windows::UI::Notifications::ToastNotification * __ptr64,struct IInspectable * __ptr64>'}" ??_7CBdeUnlockUIController@@6B?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAUIInspectable@@@Foundation@Windows@@@
0x1400010C0: "public: bool __cdecl VolumeFveStatus::IsOsVolume(void)const __ptr64" ?IsOsVolume@VolumeFveStatus@@QEBA_NXZ
0x140028D00: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x140024150: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupEventHandler>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupEventHandler@@@Details@WRL@Microsoft@@UEAAKXZ
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::GdiAlphaBlend(struct HDC__ * __ptr64,int,int,int,int,struct HDC__ * __ptr64,int,int,int,int,struct _BLENDFUNCTION)" ?GdiAlphaBlend@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@HHHH0HHHHU_BLENDFUNCTION@@@Z
0x140028ED0: "recoverypasswordelement" ??_C@_1DA@PFGMAHM@?$AAr?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AAp?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AAe?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x140018420: "private: long __cdecl CBdeUnlockUIController::_UnlockWithSmartCard(void) __ptr64" ?_UnlockWithSmartCard@CBdeUnlockUIController@@AEAAJXZ
0x140028AB0: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x1400289F0: "__cdecl _imp__wcmdln" __imp__wcmdln
0x1400287F8: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x140019060: "public: virtual long __cdecl CBdeUnlockUIController::Invoke(struct Windows::UI::Notifications::IToastNotification * __ptr64,struct Windows::UI::Notifications::IToastFailedEventArgs * __ptr64) __ptr64" ?Invoke@CBdeUnlockUIController@@UEAAJPEAUIToastNotification@Notifications@UI@Windows@@PEAUIToastFailedEventArgs@345@@Z
0x140028910: "__cdecl _imp_RegisterClassExW" __imp_RegisterClassExW
0x140001F50: "public: virtual void __cdecl CBdeUnlockUIController::OnListenedEvent(class DirectUI::Element * __ptr64,struct DirectUI::Event * __ptr64) __ptr64" ?OnListenedEvent@CBdeUnlockUIController@@UEAAXPEAVElement@DirectUI@@PEAUEvent@3@@Z
0x1400247B0: "struct HDC__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateCompatibleDC(struct HDC__ * __ptr64)" ?CreateCompatibleDC@WARBIRD_DELAY_LOAD@@YAPEAUHDC__@@PEAU2@@Z
0x1400240E0: ??_G?$InvokeHelper@V<lambda_50e289bbe3ef1b538954c93e75f0ddc5>@@@CSafeElementProxy@@UEAAPEAXI@Z
0x140028708: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140028590: "__cdecl _imp_BuisIsFipsEnabled" __imp_BuisIsFipsEnabled
0x14002F1E0: "unsigned __int64 `WarbirdUmGetDecryptionKey'::`2'::nDecryptionKey" ?nDecryptionKey@?1??WarbirdUmGetDecryptionKey@@9@4_KA
0x14002F9A8: "__cdecl _native_startup_lock" __native_startup_lock
0x1400248E0: "public: class SP_MEM<unsigned short * __ptr64> & __ptr64 __cdecl SP_MEM<unsigned short * __ptr64>::operator=(unsigned short * __ptr64 * __ptr64) __ptr64" ??4?$SP_MEM@PEAG@@QEAAAEAV0@PEAPEAG@Z
0x1400247B0: "unsigned __int64 __cdecl WARBIRD_DELAY_LOAD::GetTickCount64(void)" ?GetTickCount64@WARBIRD_DELAY_LOAD@@YA_KXZ
0x1400288F0: "__cdecl _imp_AllowSetForegroundWindow" __imp_AllowSetForegroundWindow
0x14002F290: "unsigned __int64 `WarbirdUmGetEncryptionKey'::`2'::nEncryptionKey" ?nEncryptionKey@?1??WarbirdUmGetEncryptionKey@@9@4_KA
0x140025DB0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140023DD8: "class Microsoft::WRL::ComPtr<struct IPopupCommandHandler> __cdecl Microsoft::WRL::Callback<struct IPopupCommandHandler,class CBdeUnlockUIController,struct IPopupWindow * __ptr64,struct IPopupCommand * __ptr64>(class CBdeUnlockUIController * __ptr64,long (__cdecl CBdeUnlockUIController::*)(struct IPopupWindow * __ptr64,struct IPopupCommand * __ptr64) __ptr64)" ??$Callback@UIPopupCommandHandler@@VCBdeUnlockUIController@@PEAUIPopupWindow@@PEAUIPopupCommand@@@WRL@Microsoft@@YA?AV?$ComPtr@UIPopupCommandHandler@@@01@PEAVCBdeUnlockUIController@@P83@EAAJPEAUIPopupWindow@@PEAUIPopupCommand@@@Z@Z
0x1400289F8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140028128: "const CGenericPopupCommand::`vftable'" ??_7CGenericPopupCommand@@6B@
0x140028A70: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140024500: "public: virtual void * __ptr64 __cdecl CGenericPopupCommand::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCGenericPopupCommand@@UEAAPEAXI@Z
0x140028950: api-ms-win-core-winrt-l1-1-0_NULL_THUNK_DATA
0x1400190E0: "public: virtual long __cdecl CBdeUnlockUIController::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CBdeUnlockUIController@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140028828: KERNEL32_NULL_THUNK_DATA
0x140028770: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140025550: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x14002F984: g_WarbirdSecureFunctionsLock
0x140028518: "__cdecl _imp_?LaunchUpdate@BuiVolume@@QEAAJXZ" __imp_?LaunchUpdate@BuiVolume@@QEAAJXZ
0x140026084: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14002B6F0: "unsigned short const * const `private: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetFontsForLCIDIndex(unsigned int,struct _LANG_FONT_NAMES * __ptr64)'::`2'::wszFontArray" ?wszFontArray@?1??GetFontsForLCIDIndex@?$CUxDisplayStringsT@VCEmptyType@@@@CAJIPEAU_LANG_FONT_NAMES@@@Z@4QBGB
0x1400285B0: "__cdecl _imp_?GetClassInfoPtr@TouchHyperLink@DirectUI@@SAPEAUIClassInfo@2@XZ" __imp_?GetClassInfoPtr@TouchHyperLink@DirectUI@@SAPEAUIClassInfo@2@XZ
0x1400012A0: "public: bool __cdecl VolumeFveStatus::IsDEAutoProvisioned(void)const __ptr64" ?IsDEAutoProvisioned@VolumeFveStatus@@QEBA_NXZ
0x140001110: "public: bool __cdecl VolumeFveStatus::IsPaused(void)const __ptr64" ?IsPaused@VolumeFveStatus@@QEBA_NXZ
0x1400289E0: "__cdecl _imp__commode" __imp__commode
0x14002CC2C: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x140001628: "public: __cdecl CBdeUnlockUIController::~CBdeUnlockUIController(void) __ptr64" ??1CBdeUnlockUIController@@QEAA@XZ
0x1400285D8: "__cdecl _imp_?SetSelection@TouchEdit2@DirectUI@@QEAAJJJ@Z" __imp_?SetSelection@TouchEdit2@DirectUI@@QEAAJJJ@Z
0x140028A08: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140024340: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommandHandler>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommandHandler@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1400294F0: "__cdecl GUID_9e6d89ee_4752_465f_8001_9c7193ee62a0" _GUID_9e6d89ee_4752_465f_8001_9c7193ee62a0
0x14002CC68: "__cdecl _IMPORT_DESCRIPTOR_FVEAPI" __IMPORT_DESCRIPTOR_FVEAPI
0x140028050: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommandHandler>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommandHandler@@@WRL@Microsoft@@6B@
0x14002CBA0: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x140029240: "RDVRecoveryKey" ??_C@_1BO@LBHJGEKH@?$AAR?$AAD?$AAV?$AAR?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AAK?$AAe?$AAy?$AA?$AA@
0x140028758: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140028818: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140028920: "__cdecl _imp_SetRestrictedErrorInfo" __imp_SetRestrictedErrorInfo
0x140028E98: "passphraseelement" ??_C@_1CE@NINPMEOH@?$AAp?$AAa?$AAs?$AAs?$AAp?$AAh?$AAr?$AAa?$AAs?$AAe?$AAe?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x140024818: "public: __cdecl SP_MEM<unsigned long>::SP_MEM<unsigned long>(void) __ptr64" ??0?$SP_MEM@K@@QEAA@XZ
0x140029330: "recoverykeyid" ??_C@_1BM@LGCDKCAO@?$AAr?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AAk?$AAe?$AAy?$AAi?$AAd?$AA?$AA@
0x140024818: "public: __cdecl SP_MEM<unsigned char>::SP_MEM<unsigned char>(void) __ptr64" ??0?$SP_MEM@E@@QEAA@XZ
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::GetUserObjectInformationW(void * __ptr64,int,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetUserObjectInformationW@WARBIRD_DELAY_LOAD@@YAHPEAXH0KPEAK@Z
0x140025980: wWinMainCRTStartup
0x140028558: "__cdecl _imp_?RefreshStatus@BuiVolume@@QEAAJ_N@Z" __imp_?RefreshStatus@BuiVolume@@QEAAJ_N@Z
0x140002B20: "private: long __cdecl CBdeUnlockUIController::_PassphraseUnlockCommand(struct IPopupWindow * __ptr64,struct IPopupCommand * __ptr64) __ptr64" ?_PassphraseUnlockCommand@CBdeUnlockUIController@@AEAAJPEAUIPopupWindow@@PEAUIPopupCommand@@@Z
0x140028598: BDEUI_NULL_THUNK_DATA
0x140028980: "__cdecl _imp_??_V@YAXPEAX@Z" __imp_??_V@YAXPEAX@Z
0x140019120: "public: virtual unsigned long __cdecl CBdeUnlockUIController::Release(void) __ptr64" ?Release@CBdeUnlockUIController@@UEAAKXZ
0x140025F40: "__cdecl ValidateImageBase" _ValidateImageBase
0x140028690: "__cdecl _imp_DUserPostEvent" __imp_DUserPostEvent
0x140024834: "public: __cdecl SP_MEM<unsigned long>::~SP_MEM<unsigned long>(void) __ptr64" ??1?$SP_MEM@K@@QEAA@XZ
0x140024834: "public: __cdecl SP_MEM<unsigned char>::~SP_MEM<unsigned char>(void) __ptr64" ??1?$SP_MEM@E@@QEAA@XZ
0x140025CA8: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140024960: "unsigned short * __ptr64 * __ptr64 __cdecl MemoryAllocT<unsigned short * __ptr64>(unsigned __int64)" ??$MemoryAllocT@PEAG@@YAPEAPEAG_K@Z
0x140025CD9: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x1400246F0: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x140001040: "public: bool __cdecl VolumeFveStatus::HasTpmProtector(void)const __ptr64" ?HasTpmProtector@VolumeFveStatus@@QEBA_NXZ
0x14002CCB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-error-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-error-l1-1-0
0x1400247B0: "unsigned long __cdecl WARBIRD_DELAY_LOAD::SleepEx(unsigned long,int)" ?SleepEx@WARBIRD_DELAY_LOAD@@YAKKH@Z
0x1400288D0: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x140024280: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupEventHandler>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupEventHandler@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x140028EC0: "editpwd" ??_C@_1BA@IBEHFLMP@?$AAe?$AAd?$AAi?$AAt?$AAp?$AAw?$AAd?$AA?$AA@
0x140028730: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14002CC18: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x1400287D8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x14002BA10: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x140028568: "__cdecl _imp_BuisCreateProxyObject" __imp_BuisCreateProxyObject
0x140028548: "__cdecl _imp_?EnableAutoUnlock@BuiVolume@@QEAAJXZ" __imp_?EnableAutoUnlock@BuiVolume@@QEAAJXZ
0x14002F8E8: "__cdecl newmode" _newmode
0x140028A00: "__cdecl _imp__initterm" __imp__initterm
0x140028A38: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140029350: "wrongrecpwd" ??_C@_1BI@OJOHHLLG@?$AAw?$AAr?$AAo?$AAn?$AAg?$AAr?$AAe?$AAc?$AAp?$AAw?$AAd?$AA?$AA@
0x140028930: "__cdecl _imp_RoGetMatchingRestrictedErrorInfo" __imp_RoGetMatchingRestrictedErrorInfo
0x1400240E0: ??_E?$InvokeHelper@V<lambda_50e289bbe3ef1b538954c93e75f0ddc5>@@@CSafeElementProxy@@UEAAPEAXI@Z
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::DeleteDC(struct HDC__ * __ptr64)" ?DeleteDC@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@@Z
0x1400286E0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14002F8F8: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInstance" ?g_hInstance@@3PEAUHINSTANCE__@@EA
0x14002C2C0: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::GetSystemMetrics(int)" ?GetSystemMetrics@WARBIRD_DELAY_LOAD@@YAHH@Z
0x1400287B8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x140025CE5: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x1400024E4: "private: long __cdecl CBdeUnlockUIController::_LoadMessage(unsigned long,unsigned short * __ptr64 * __ptr64,...) __ptr64" ?_LoadMessage@CBdeUnlockUIController@@AEAAJKPEAPEAGZZ
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::MultiByteToWideChar(unsigned int,unsigned long,char const * __ptr64,int,unsigned short * __ptr64,int)" ?MultiByteToWideChar@WARBIRD_DELAY_LOAD@@YAHIKPEBDHPEAGH@Z
0x14002C320: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x140002B40: "private: long __cdecl CBdeUnlockUIController::_RecoveryPasswordUnlockCommand(struct IPopupWindow * __ptr64,struct IPopupCommand * __ptr64) __ptr64" ?_RecoveryPasswordUnlockCommand@CBdeUnlockUIController@@AEAAJPEAUIPopupWindow@@PEAUIPopupCommand@@@Z
0x140028578: "__cdecl _imp_??0BuiVolume@@QEAA@XZ" __imp_??0BuiVolume@@QEAA@XZ
0x140028580: "__cdecl _imp_??1BuiVolume@@QEAA@XZ" __imp_??1BuiVolume@@QEAA@XZ
0x140001230: "public: bool __cdecl VolumeFveStatus::FailedDryRun(void)const __ptr64" ?FailedDryRun@VolumeFveStatus@@QEBA_NXZ
0x1400295D0: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x140024500: "public: virtual void * __ptr64 __cdecl CGenericPopupCommand::`vector deleting destructor'(unsigned int) __ptr64" ??_ECGenericPopupCommand@@UEAAPEAXI@Z
0x140028888: SHLWAPI_NULL_THUNK_DATA
0x140028908: "__cdecl _imp_GetMessageW" __imp_GetMessageW
0x14002F998: "__cdecl _onexitend" __onexitend
0x140028810: "__cdecl _imp_CreateThread" __imp_CreateThread
0x1400295E0: "unsigned char const * const `public: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetAllPreferredStrings(unsigned short * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64 * __ptr64,int * __ptr64,struct _LANG_FONT_NAMES * __ptr64)'::`2'::bEncryptedStringBuffer" ?bEncryptedStringBuffer@?1??GetAllPreferredStrings@?$CUxDisplayStringsT@VCEmptyType@@@@SAJPEAGIPEAPEAPEAGPEAHPEAU_LANG_FONT_NAMES@@@Z@4QBEB
0x140028A28: "__cdecl _imp__exit" __imp__exit
0x140028688: DUI70_NULL_THUNK_DATA
0x14002CCCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-error-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-error-l1-1-1
0x140028AC0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140028850: "__cdecl _imp_SHGetKnownFolderIDList" __imp_SHGetKnownFolderIDList
0x14002479C: "void __cdecl WinSqmCreateDWORDStreamEntry(struct _SQM_STREAM_ENTRY * __ptr64,unsigned long)" ?WinSqmCreateDWORDStreamEntry@@YAXPEAU_SQM_STREAM_ENTRY@@K@Z
0x1400288A0: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x140028A58: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x1400291E0: "SecureStartupFeature-Enabled-Dev" ??_C@_1FM@MBKFDOIN@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?9?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?9?$AAD?$AAe?$AAv@
0x1400247B0: "struct HFONT__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateFontIndirectW(struct tagLOGFONTW const * __ptr64)" ?CreateFontIndirectW@WARBIRD_DELAY_LOAD@@YAPEAUHFONT__@@PEBUtagLOGFONTW@@@Z
0x140025D30: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x140028858: "__cdecl _imp_SHChangeNotifyDeregister" __imp_SHChangeNotifyDeregister
0x1400287A8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1400280C8: "const ISafeElementProxyInvokeHelper::`vftable'" ??_7ISafeElementProxyInvokeHelper@@6B@
0x140028DF8: "__cdecl GUID_f7f3a506_1e87_42d6_bcfb_b8c809fa5494" _GUID_f7f3a506_1e87_42d6_bcfb_b8c809fa5494
0x140028918: USER32_NULL_THUNK_DATA
0x1400288C0: "__cdecl _imp_DefWindowProcW" __imp_DefWindowProcW
0x140028520: "__cdecl _imp_?NeedsDiscoveryVolumeUpdate@BuiVolume@@QEAAJPEAH@Z" __imp_?NeedsDiscoveryVolumeUpdate@BuiVolume@@QEAAJPEAH@Z
0x1400247EC: "void __cdecl MemoryFree(void * __ptr64)" ?MemoryFree@@YAXPEAX@Z
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::RedrawWindow(struct HWND__ * __ptr64,struct tagRECT const * __ptr64,struct HRGN__ * __ptr64,unsigned int)" ?RedrawWindow@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEBUtagRECT@@PEAUHRGN__@@I@Z
0x140024874: "public: void __cdecl SH<void * __ptr64,class SH_HANDLE>::Reset(void) __ptr64" ?Reset@?$SH@PEAXVSH_HANDLE@@@@QEAAXXZ
0x140028AE8: "__cdecl _xi_a" __xi_a
0x140028790: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1400247D0: "__cdecl matherr" _matherr
0x140025358: "long __cdecl LoadResourceString(struct HINSTANCE__ * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64)" ?LoadResourceString@@YAJPEAUHINSTANCE__@@IPEAPEAG@Z
0x140024340: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupEventHandler>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupEventHandler@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140028940: "__cdecl _imp_RoActivateInstance" __imp_RoActivateInstance
0x140024834: "public: __cdecl SP_MEM<unsigned short * __ptr64>::~SP_MEM<unsigned short * __ptr64>(void) __ptr64" ??1?$SP_MEM@PEAG@@QEAA@XZ
0x1400012C0: "public: unsigned __int64 __cdecl VolumeFveStatus::GetExtendedFlags(void)const __ptr64" ?GetExtendedFlags@VolumeFveStatus@@QEBA_KXZ
0x1400249E8: RtlULongLongAdd
0x140028FD8: "unlocksmartcard" ??_C@_1CA@LDPFJKBC@?$AAu?$AAn?$AAl?$AAo?$AAc?$AAk?$AAs?$AAm?$AAa?$AAr?$AAt?$AAc?$AAa?$AAr?$AAd?$AA?$AA@
0x140028AA0: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x140028678: "__cdecl _imp_InitThread" __imp_InitThread
0x140024818: "public: __cdecl SP_MEM<unsigned short * __ptr64>::SP_MEM<unsigned short * __ptr64>(void) __ptr64" ??0?$SP_MEM@PEAG@@QEAA@XZ
0x1400255A0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x14002C2F8: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x1400288E8: "__cdecl _imp_SetForegroundWindow" __imp_SetForegroundWindow
0x140024EA0: "public: virtual void __cdecl CVolumeListener::SetCritical(int) __ptr64" ?SetCritical@CVolumeListener@@UEAAXH@Z
0x140028160: "const CBackgroundUnlocker::`vftable'" ??_7CBackgroundUnlocker@@6B@
0x140018EA0: "public: virtual long __cdecl CBdeUnlockUIController::Invoke(struct Windows::UI::Notifications::IToastNotification * __ptr64,struct IInspectable * __ptr64) __ptr64" ?Invoke@CBdeUnlockUIController@@UEAAJPEAUIToastNotification@Notifications@UI@Windows@@PEAUIInspectable@@@Z
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::GetDeviceCaps(struct HDC__ * __ptr64,int)" ?GetDeviceCaps@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@H@Z
0x140029308: "wrongsc" ??_C@_1BA@NBDJMBLE@?$AAw?$AAr?$AAo?$AAn?$AAg?$AAs?$AAc?$AA?$AA@
0x140029570: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::LogicalToPhysicalPointForPerMonitorDPI(struct HWND__ * __ptr64,struct tagPOINT * __ptr64)" ?LogicalToPhysicalPointForPerMonitorDPI@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEAUtagPOINT@@@Z
0x1400245E0: "public: virtual void * __ptr64 __cdecl CBackgroundUnlocker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCBackgroundUnlocker@@UEAAPEAXI@Z
0x140025BA8: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x1400289D0: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x140029160: "checkboxautounlock" ??_C@_1CG@DDCPDIPE@?$AAc?$AAh?$AAe?$AAc?$AAk?$AAb?$AAo?$AAx?$AAa?$AAu?$AAt?$AAo?$AAu?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x1400286D8: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1400259D4: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140028020: "const type_info::`vftable'" ??_7type_info@@6B@
0x140028530: "__cdecl _imp_?UnlockWithPassword@BuiVolume@@QEAAJPEBGPEAH@Z" __imp_?UnlockWithPassword@BuiVolume@@QEAAJPEBGPEAH@Z
0x140024420: "public: virtual void * __ptr64 __cdecl ISafeElementProxyInvokeHelper::`vector deleting destructor'(unsigned int) __ptr64" ??_EISafeElementProxyInvokeHelper@@UEAAPEAXI@Z
0x1400247B0: "unsigned long __cdecl WARBIRD_DELAY_LOAD::SetTextColor(struct HDC__ * __ptr64,unsigned long)" ?SetTextColor@WARBIRD_DELAY_LOAD@@YAKPEAUHDC__@@K@Z
0x140028E10: "unsigned short const * const RuntimeClass_Windows_UI_Notifications_ToastNotificationManager" ?RuntimeClass_Windows_UI_Notifications_ToastNotificationManager@@3QBGB
0x1400285F8: "__cdecl _imp_?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z" __imp_?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
0x1400259B0: "__cdecl _security_check_cookie" __security_check_cookie
0x14002489C: "public: void __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_HLOCAL@E@@@@QEAAXXZ
0x14002CC7C: "__cdecl _IMPORT_DESCRIPTOR_BDEUI" __IMPORT_DESCRIPTOR_BDEUI
0x140028AE0: "__cdecl _xc_z" __xc_z
0x140001070: "public: bool __cdecl VolumeFveStatus::HasPBKDF2RecoveryPassword(void)const __ptr64" ?HasPBKDF2RecoveryPassword@VolumeFveStatus@@QEBA_NXZ
0x1400287D0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::GetLocaleInfoEx(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,int)" ?GetLocaleInfoEx@WARBIRD_DELAY_LOAD@@YAHPEBGKPEAGH@Z
0x1400012D0: "public: long __cdecl VolumeFveStatus::GetLastConvertStatus(void)const __ptr64" ?GetLastConvertStatus@VolumeFveStatus@@QEBAJXZ
0x14002F2A0: "unsigned char * `WarbirdUmGetDecryptionCipher'::`2'::DecryptionCipher" ?DecryptionCipher@?1??WarbirdUmGetDecryptionCipher@@9@4PAEA
0x1400012E0: "public: unsigned short * __ptr64 * __ptr64 * __ptr64 __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::operator&(void) __ptr64" ??I?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAPEAPEAPEAGXZ
0x140002D74: "private: long __cdecl CBdeUnlockUIController::_ShowMoreOptions(void) __ptr64" ?_ShowMoreOptions@CBdeUnlockUIController@@AEAAJXZ
0x140025D18: "__cdecl CxxThrowException" _CxxThrowException
0x1400289C8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140028600: "__cdecl _imp_?UserTextChanged@TouchEditBase@DirectUI@@SA?AVUID@@XZ" __imp_?UserTextChanged@TouchEditBase@DirectUI@@SA?AVUID@@XZ
0x140028A90: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x140028798: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400247B0: "struct HDESK__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetThreadDesktop(unsigned long)" ?GetThreadDesktop@WARBIRD_DELAY_LOAD@@YAPEAUHDESK__@@K@Z
0x140029390: "Windows.SystemToast.BdeUnlock" ??_C@_1DM@IBNNGJMN@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?4?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAo?$AAa?$AAs?$AAt?$AA?4?$AAB?$AAd?$AAe?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x14002F170: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x140029530: "__cdecl GUID_4452ce09_0488_4ca7_a896_c4f140907549" _GUID_4452ce09_0488_4ca7_a896_c4f140907549
0x1400287C8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140028768: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x1400292C0: "wrongusb" ??_C@_1BC@DIFMHMDH@?$AAw?$AAr?$AAo?$AAn?$AAg?$AAu?$AAs?$AAb?$AA?$AA@
0x140026170: "__cdecl _chkstk" __chkstk
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::SystemParametersInfoW(unsigned int,unsigned int,void * __ptr64,unsigned int)" ?SystemParametersInfoW@WARBIRD_DELAY_LOAD@@YAHIIPEAXI@Z
0x14002489C: "public: __cdecl SP_HLOCAL<unsigned char>::~SP_HLOCAL<unsigned char>(void) __ptr64" ??1?$SP_HLOCAL@E@@QEAA@XZ
0x140002F4C: "private: bool __cdecl CBdeUnlockUIController::_CanEnableAutoUnlock(void) __ptr64" ?_CanEnableAutoUnlock@CBdeUnlockUIController@@AEAA_NXZ
0x140025D30: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x140028F00: "editrecpwd" ??_C@_1BG@KEOLCDIC@?$AAe?$AAd?$AAi?$AAt?$AAr?$AAe?$AAc?$AAp?$AAw?$AAd?$AA?$AA@
0x140018904: "private: long __cdecl CBdeUnlockUIController::_UnlockWithRecoveryPassword(void) __ptr64" ?_UnlockWithRecoveryPassword@CBdeUnlockUIController@@AEAAJXZ
0x140024DEC: "public: static long __cdecl CFveApiWrapper::GetStatusFlagsFromName(unsigned short const * __ptr64,unsigned long * __ptr64)" ?GetStatusFlagsFromName@CFveApiWrapper@@SAJPEBGPEAK@Z
0x1400287A0: "__cdecl _imp_GetVolumePathNameW" __imp_GetVolumePathNameW
0x140028658: "__cdecl _imp_?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z" __imp_?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z
0x140001160: "public: bool __cdecl VolumeFveStatus::IsEncrypting(void)const __ptr64" ?IsEncrypting@VolumeFveStatus@@QEBA_NXZ
0x14002B280: "unsigned long const * const `public: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetAllPreferredStrings(unsigned short * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64 * __ptr64,int * __ptr64,struct _LANG_FONT_NAMES * __ptr64)'::`2'::uLanguageArray" ?uLanguageArray@?1??GetAllPreferredStrings@?$CUxDisplayStringsT@VCEmptyType@@@@SAJPEAGIPEAPEAPEAGPEAHPEAU_LANG_FONT_NAMES@@@Z@4QBKB
0x14002F8F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmthxyUxlimvihglmvUywvfmolxpUlyquivUznwGEUkivxlnkOlyq@bdeunlock" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmthxyUxlimvihglmvUywvfmolxpUlyquivUznwGEUkivxlnkOlyq@bdeunlock
0x1400290D0: "gpreadonlyelement" ??_C@_1CE@DOOFHHNN@?$AAg?$AAp?$AAr?$AAe?$AAa?$AAd?$AAo?$AAn?$AAl?$AAy?$AAe?$AAl?$AAe?$AAm?$AAe?$AAn?$AAt?$AA?$AA@
0x140024370: "[thunk]:public: virtual unsigned long __cdecl CBdeUnlockUIController::Release`adjustor{16}' (void) __ptr64" ?Release@CBdeUnlockUIController@@WBA@EAAKXZ
0x140028830: "__cdecl _imp_SHGetPathFromIDListEx" __imp_SHGetPathFromIDListEx
0x140024340: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupEventHandler>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupEventHandler@@@WRL@Microsoft@@UEAAPEAXI@Z
0x140001280: "public: bool __cdecl VolumeFveStatus::IsUnknownFveVersion(void)const __ptr64" ?IsUnknownFveVersion@VolumeFveStatus@@QEBA_NXZ
0x1400012E0: "protected: __cdecl VolumeFveStatus::VolumeFveStatus(void) __ptr64" ??0VolumeFveStatus@@IEAA@XZ
0x14002F910: "union _NOTIFICATION_INFORMATION g_WarbirdNotificationInformation" ?g_WarbirdNotificationInformation@@3T_NOTIFICATION_INFORMATION@@A
0x140028B08: "__cdecl _guard_fids_table" __guard_fids_table
0x14002CC40: "__cdecl _IMPORT_DESCRIPTOR_DUser" __IMPORT_DESCRIPTOR_DUser
0x140028A68: msvcrt_NULL_THUNK_DATA
0x1400180C8: "private: long __cdecl CBdeUnlockUIController::_UnlockWithUSB(void) __ptr64" ?_UnlockWithUSB@CBdeUnlockUIController@@AEAAJXZ
0x140028400: "__cdecl load_config_used" _load_config_used
0x1400289A8: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x1400255A0: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x140028840: "__cdecl _imp_ILFree" __imp_ILFree
0x140029030: "moreoptions" ??_C@_1BI@DDKJMEBH@?$AAm?$AAo?$AAr?$AAe?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$AA@
0x14002B320: ?LangFontIndexMapping@?1??GetFontsForLCIDIndex@?$CUxDisplayStringsT@VCEmptyType@@@@CAJIPEAU_LANG_FONT_NAMES@@@Z@4QBU_LANG_FONT_INDEX_INFO@?1??12@CAJI0@Z@B
0x140018080: "private: bool __cdecl CBdeUnlockUIController::_AutoUnlockRequested(void) __ptr64" ?_AutoUnlockRequested@CBdeUnlockUIController@@AEAA_NXZ
0x1400012F0: "public: class VolumeFveStatus & __ptr64 __cdecl VolumeFveStatus::operator=(class VolumeFveStatus const & __ptr64) __ptr64" ??4VolumeFveStatus@@QEAAAEAV0@AEBV0@@Z
0x140025220: "protected: virtual void __cdecl CExitOnVolumeRemove::OnEvent(long,unsigned short const * __ptr64) __ptr64" ?OnEvent@CExitOnVolumeRemove@@MEAAXJPEBG@Z
0x140028898: "__cdecl _imp_PostQuitMessage" __imp_PostQuitMessage
0x1400286C8: "__cdecl _imp_FveIsRecoveryPasswordGroupValidW" __imp_FveIsRecoveryPasswordGroupValidW
0x1400241A0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommandHandler>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommandHandler@@@Details@WRL@Microsoft@@UEAAKXZ
0x140028E74: "public: static unsigned int const BuiVolume::NO_DRIVE_LETTER" ?NO_DRIVE_LETTER@BuiVolume@@2IB
0x1400245E0: "public: virtual void * __ptr64 __cdecl CBackgroundUnlocker::`vector deleting destructor'(unsigned int) __ptr64" ??_ECBackgroundUnlocker@@UEAAPEAXI@Z
0x140028618: "__cdecl _imp_StrToID" __imp_StrToID
0x140028540: "__cdecl _imp_?UnlockWithSmartCard@BuiVolume@@QEAAJPEAUHWND__@@PEAH@Z" __imp_?UnlockWithSmartCard@BuiVolume@@QEAAJPEAUHWND__@@PEAH@Z
0x1400251D0: "private: static long __cdecl CVolumeListener::GetModule(struct HINSTANCE__ * __ptr64 * __ptr64)" ?GetModule@CVolumeListener@@CAJPEAPEAUHINSTANCE__@@@Z
0x14002BA30: "private: static unsigned short const * const CVolumeListener::szInstanceProperty" ?szInstanceProperty@CVolumeListener@@0QBGB
0x14002CBC8: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140024780: "public: virtual void __cdecl CSafeElementListenerCB::OnListenerAttach(class DirectUI::Element * __ptr64) __ptr64" ?OnListenerAttach@CSafeElementListenerCB@@UEAAXPEAVElement@DirectUI@@@Z
0x140028740: "__cdecl _imp_GetLogicalDriveStringsW" __imp_GetLogicalDriveStringsW
0x1400293D0: "<toast> <visual> <binding te" ??_C@_1BBO@ECMOPAPF@?$AA?$DM?$AAt?$AAo?$AAa?$AAs?$AAt?$AA?$DO?$AA?5?$AA?5?$AA?$DM?$AAv?$AAi?$AAs?$AAu?$AAa?$AAl?$AA?$DO?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$DM?$AAb?$AAi?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAe@
0x1400247B0: "unsigned long __cdecl WARBIRD_DELAY_LOAD::LocaleNameToLCID(unsigned short const * __ptr64,unsigned long)" ?LocaleNameToLCID@WARBIRD_DELAY_LOAD@@YAKPEBGK@Z
0x140028A48: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140025D00: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x140028A18: "__cdecl _imp_iswascii" __imp_iswascii
0x14001871C: "private: long __cdecl CBdeUnlockUIController::_UnlockWithPassphrase(void) __ptr64" ?_UnlockWithPassphrase@CBdeUnlockUIController@@AEAAJXZ
0x140001180: "public: bool __cdecl VolumeFveStatus::IsDecrypting(void)const __ptr64" ?IsDecrypting@VolumeFveStatus@@QEBA_NXZ
0x140024420: "public: virtual void * __ptr64 __cdecl ISafeElementProxyInvokeHelper::`scalar deleting destructor'(unsigned int) __ptr64" ??_GISafeElementProxyInvokeHelper@@UEAAPEAXI@Z
0x1400010B0: "public: bool __cdecl VolumeFveStatus::HasSmartCardProtector(void)const __ptr64" ?HasSmartCardProtector@VolumeFveStatus@@QEBA_NXZ
0x1400288D8: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140024670: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140028588: "__cdecl _imp_?ClearProxyObject@BuiVolume@@QEAAXXZ" __imp_?ClearProxyObject@BuiVolume@@QEAAXXZ
0x140028A78: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400286F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14002F8E4: "__cdecl dowildcard" _dowildcard
0x1400241C0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommandHandler>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommandHandler@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1400012E0: "public: unsigned char * __ptr64 * __ptr64 __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::operator&(void) __ptr64" ??I?$SP@EV?$SP_MEM@E@@@@QEAAPEAPEAEXZ
0x140001010: "public: __cdecl VolumeFveStatus::VolumeFveStatus(unsigned long,unsigned __int64,long,enum _FVE_WIPING_STATE) __ptr64" ??0VolumeFveStatus@@QEAA@K_KJW4_FVE_WIPING_STATE@@@Z
0x1400289B0: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x14002CC54: "__cdecl _IMPORT_DESCRIPTOR_DUI70" __IMPORT_DESCRIPTOR_DUI70
0x140028000: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x140028650: "__cdecl _imp_?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z" __imp_?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z
0x140024150: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommandHandler>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommandHandler@@@Details@WRL@Microsoft@@UEAAKXZ
0x140028648: "__cdecl _imp_?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z" __imp_?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z
0x140024380: "[thunk]:public: virtual unsigned long __cdecl CBdeUnlockUIController::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@CBdeUnlockUIController@@WBA@EAAKXZ
0x140028A80: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1400259E0: "__cdecl purecall" _purecall
0x140025300: "public: virtual long __cdecl CExitOnVolumeRemove::Initialize(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Initialize@CExitOnVolumeRemove@@UEAAJPEBG0@Z
0x140024874: "public: __cdecl SH_HANDLE::~SH_HANDLE(void) __ptr64" ??1SH_HANDLE@@QEAA@XZ
0x140029368: "fvenotify" ??_C@_1BE@DKBNMFBF@?$AAf?$AAv?$AAe?$AAn?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x140028DE8: "__cdecl GUID_50ac103f_d235_4598_bbef_98fe4d1a3ad4" _GUID_50ac103f_d235_4598_bbef_98fe4d1a3ad4
0x140028610: "__cdecl _imp_?SetCheckedState@TouchCheckBox@DirectUI@@QEAAJW4CheckedStateFlags@2@@Z" __imp_?SetCheckedState@TouchCheckBox@DirectUI@@QEAAJW4CheckedStateFlags@2@@Z
0x140024780: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140024818: "public: __cdecl SH_HANDLE::SH_HANDLE(void) __ptr64" ??0SH_HANDLE@@QEAA@XZ
0x140025DDC: RtlpImageNtHeader
0x140002B58: "private: long __cdecl CBdeUnlockUIController::_ShowRecoveryOptions(bool) __ptr64" ?_ShowRecoveryOptions@CBdeUnlockUIController@@AEAAJ_N@Z
0x140001150: "public: bool __cdecl VolumeFveStatus::IsPartiallyConverted(void)const __ptr64" ?IsPartiallyConverted@VolumeFveStatus@@QEBA_NXZ
0x140028780: "__cdecl _imp_GetLocaleInfoEx" __imp_GetLocaleInfoEx
0x140001090: "public: bool __cdecl VolumeFveStatus::HasStartupKeyProtector(void)const __ptr64" ?HasStartupKeyProtector@VolumeFveStatus@@QEBA_NXZ
0x140024EC0: "public: virtual long __cdecl CVolumeListener::Initialize(void) __ptr64" ?Initialize@CVolumeListener@@UEAAJXZ
0x140028700: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140018C7C: "private: void __cdecl CBdeUnlockUIController::_ShowRecoveryPasswordError(long,unsigned long) __ptr64" ?_ShowRecoveryPasswordError@CBdeUnlockUIController@@AEAAXJK@Z
0x140029380: "open" ??_C@_19BDAJEHDN@?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x140018E40: "public: virtual long __cdecl CBdeUnlockUIController::Invoke(struct Windows::UI::Notifications::IToastNotification * __ptr64,struct Windows::UI::Notifications::IToastDismissedEventArgs * __ptr64) __ptr64" ?Invoke@CBdeUnlockUIController@@UEAAJPEAUIToastNotification@Notifications@UI@Windows@@PEAUIToastDismissedEventArgs@345@@Z
0x1400241A0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommand>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommand@@@Details@WRL@Microsoft@@UEAAKXZ
0x1400248D4: "public: unsigned long * __ptr64 __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::GetPtrAs<unsigned long>(void)const __ptr64" ??$GetPtrAs@K@?$SP@KV?$SP_MEM@K@@@@QEBAPEAKXZ
0x1400285F0: "__cdecl _imp_?GetSelection@TouchEdit2@DirectUI@@QEAAJPEAJ0@Z" __imp_?GetSelection@TouchEdit2@DirectUI@@QEAAJPEAJ0@Z
0x140028900: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x140028A98: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x140026078: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x140001270: "public: bool __cdecl VolumeFveStatus::IsCsvMetadataVolume(void)const __ptr64" ?IsCsvMetadataVolume@VolumeFveStatus@@QEBA_NXZ
0x1400011A0: "public: bool __cdecl VolumeFveStatus::IsWiping(void)const __ptr64" ?IsWiping@VolumeFveStatus@@QEBA_NXZ
0x14002F980: g_WarbirdSecureFunctionsRefCount
0x140028A50: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140018B60: "private: long __cdecl CBdeUnlockUIController::_ShowRecoveryKeyId(void) __ptr64" ?_ShowRecoveryKeyId@CBdeUnlockUIController@@AEAAJXZ
0x140028638: "__cdecl _imp_?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z" __imp_?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z
0x140028A88: ntdll_NULL_THUNK_DATA
0x140028978: "__cdecl _imp_memcpy" __imp_memcpy
0x14002F198: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x140028370: "const CExitOnVolumeRemove::`vftable'" ??_7CExitOnVolumeRemove@@6B@
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::OffsetRect(struct tagRECT * __ptr64,int,int)" ?OffsetRect@WARBIRD_DELAY_LOAD@@YAHPEAUtagRECT@@HH@Z
0x1400288C8: "__cdecl _imp_FindWindowW" __imp_FindWindowW
0x140024834: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_MEM@E@@@@QEAAXXZ
0x1400250F4: "private: void __cdecl CVolumeListener::DispatchEvent(unsigned __int64,__int64) __ptr64" ?DispatchEvent@CVolumeListener@@AEAAX_K_J@Z
0x1400247D0: "struct HMONITOR__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::MonitorFromWindow(struct HWND__ * __ptr64,unsigned long)" ?MonitorFromWindow@WARBIRD_DELAY_LOAD@@YAPEAUHMONITOR__@@PEAUHWND__@@K@Z
0x140028168: "const CBdeUnlockUIController::`vftable'{for `Windows::Foundation::ITypedEventHandler<class Windows::UI::Notifications::ToastNotification * __ptr64,class Windows::UI::Notifications::ToastFailedEventArgs * __ptr64>'}" ??_7CBdeUnlockUIController@@6B?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastFailedEventArgs@234@@Foundation@Windows@@@
0x140018048: "private: bool __cdecl CBdeUnlockUIController::_CanUseRecoveryPassword(void)const __ptr64" ?_CanUseRecoveryPassword@CBdeUnlockUIController@@AEBA_NXZ
0x140001190: "public: bool __cdecl VolumeFveStatus::IsDecrypted(void)const __ptr64" ?IsDecrypted@VolumeFveStatus@@QEBA_NXZ
0x140029598: "__cdecl GUID_b7d1e57c_4276_4c21_9bfe_6f02fbfd67d3" _GUID_b7d1e57c_4276_4c21_9bfe_6f02fbfd67d3
0x140024390: "[thunk]:public: virtual long __cdecl CBdeUnlockUIController::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CBdeUnlockUIController@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x140018314: "private: long __cdecl CBdeUnlockUIController::_HideSmartCardUnlockPanel(void) __ptr64" ?_HideSmartCardUnlockPanel@CBdeUnlockUIController@@AEAAJXZ
0x140024340: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommand>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommand@@@WRL@Microsoft@@UEAAPEAXI@Z
0x1400289D8: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x14002F1C8: "__cdecl _security_cookie" __security_cookie
0x140001E00: "private: long __cdecl CBdeUnlockUIController::_CreatePopupCommand(struct IPopupCommandHandler * __ptr64) __ptr64" ?_CreatePopupCommand@CBdeUnlockUIController@@AEAAJPEAUIPopupCommandHandler@@@Z
0x140024340: ??_G?$DelegateInvokeHelper@UIPopupCommandHandler@@V<lambda_8c362575297decb7b920620aeef3885d>@@$0?0PEAUIPopupWindow@@PEAUIPopupCommand@@@?$DelegateArgTraits@P8IPopupCommandHandler@@EAAJPEAUIPopupWindow@@PEAUIPopupCommand@@@Z@Details@WRL@Microsoft@@UEAAPEAXI@Z
0x140026170: "__cdecl alloca_probe" _alloca_probe
0x1400011E0: "public: bool __cdecl VolumeFveStatus::IsDisabled(void)const __ptr64" ?IsDisabled@VolumeFveStatus@@QEBA_NXZ
0x1400285E8: "__cdecl _imp_?SetContentString@Element@DirectUI@@QEAAJPEBG@Z" __imp_?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
0x140028738: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140028848: "__cdecl _imp_SHChangeNotifyRegister" __imp_SHChangeNotifyRegister
0x1400285D0: "__cdecl _imp_?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z" __imp_?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
0x140028750: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14002F1C0: "__cdecl _defaultmatherr" __defaultmatherr
0x1400288A8: "__cdecl _imp_SetPropW" __imp_SetPropW
0x140024984: RtlUIntAdd
0x1400243C0: "[thunk]:public: virtual unsigned long __cdecl CBdeUnlockUIController::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CBdeUnlockUIController@@W7EAAKXZ
0x1400285E0: "__cdecl _imp_?Release@Value@DirectUI@@QEAAXXZ" __imp_?Release@Value@DirectUI@@QEAAXXZ
0x1400286E8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x140024340: ??_E?$DelegateInvokeHelper@UIPopupEventHandler@@V<lambda_9361927196b2880cfd5741db7e56dede>@@$0?0PEAUIPopupWindow@@@?$DelegateArgTraits@P8IPopupEventHandler@@EAAJPEAUIPopupWindow@@@Z@Details@WRL@Microsoft@@UEAAPEAXI@Z
0x140018D10: "private: void __cdecl CBdeUnlockUIController::_UnlockDone(void) __ptr64" ?_UnlockDone@CBdeUnlockUIController@@AEAAXXZ
0x1400010F0: "public: bool __cdecl VolumeFveStatus::IsRoamingDevice(void)const __ptr64" ?IsRoamingDevice@VolumeFveStatus@@QEBA_NXZ
0x14002F9A0: "__cdecl _onexitbegin" __onexitbegin
0x140001060: "public: bool __cdecl VolumeFveStatus::HasRecoveryPassword(void)const __ptr64" ?HasRecoveryPassword@VolumeFveStatus@@QEBA_NXZ
0x1400295C0: "WinSta0" ??_C@_1BA@IMLGMNLL@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?$AA@
0x140018294: "private: void __cdecl CBdeUnlockUIController::_ShowUSBError(long) __ptr64" ?_ShowUSBError@CBdeUnlockUIController@@AEAAXJ@Z
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::GetMonitorInfoW(struct HMONITOR__ * __ptr64,struct tagMONITORINFO * __ptr64)" ?GetMonitorInfoW@WARBIRD_DELAY_LOAD@@YAHPEAUHMONITOR__@@PEAUtagMONITORINFO@@@Z
0x140028998: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1400289C0: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x140028710: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140001130: "public: bool __cdecl VolumeFveStatus::IsConverting(void)const __ptr64" ?IsConverting@VolumeFveStatus@@QEBA_NXZ
0x14002CC90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0
0x14002CBB4: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1400247D0: "int __cdecl WARBIRD_DELAY_LOAD::SetBkMode(struct HDC__ * __ptr64,int)" ?SetBkMode@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@H@Z
0x140024A14: "long __cdecl FveIsBiDiLocalizedSystem(int * __ptr64)" ?FveIsBiDiLocalizedSystem@@YAJPEAH@Z
0x140001170: "public: bool __cdecl VolumeFveStatus::IsEncrypted(void)const __ptr64" ?IsEncrypted@VolumeFveStatus@@QEBA_NXZ
0x140019100: "public: virtual unsigned long __cdecl CBdeUnlockUIController::AddRef(void) __ptr64" ?AddRef@CBdeUnlockUIController@@UEAAKXZ
0x140025F74: "__cdecl _security_init_cookie" __security_init_cookie
0x1400248C4: "public: unsigned long * __ptr64 __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Detach(void) __ptr64" ?Detach@?$SP@KV?$SP_MEM@K@@@@QEAAPEAKXZ
0x140028A10: "__cdecl _imp__cexit" __imp__cexit
0x140028508: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x140025E38: "__cdecl get_image_app_type" _get_image_app_type
0x140025CCD: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x140024780: "public: virtual void __cdecl CSafeElementListenerCB::OnListenerDetach(class DirectUI::Element * __ptr64) __ptr64" ?OnListenerDetach@CSafeElementListenerCB@@UEAAXPEAVElement@DirectUI@@@Z
0x14002CBDC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14002612E: wcscmp
0x140029190: "SecureStartupFeature-Enabled-Pre" ??_C@_1EK@MKCPFLPM@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?9?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?9?$AAP?$AAr?$AAe@
0x1400286B8: "__cdecl _imp_FveGetStatus" __imp_FveGetStatus
0x140029540: "__cdecl GUID_95e3e803_c969_5e3a_9753_ea2ad22a9a33" _GUID_95e3e803_c969_5e3a_9753_ea2ad22a9a33
0x140024480: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupCommand>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupCommand@@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14002F900: "public: static class Microsoft::WRL::Details::ModuleBase * __ptr64 __ptr64 Microsoft::WRL::Details::ModuleBase::module_" ?module_@ModuleBase@Details@WRL@Microsoft@@2PEAV1234@EA
0x140002910: "private: long __cdecl CBdeUnlockUIController::_OnBackCommand(struct IPopupWindow * __ptr64) __ptr64" ?_OnBackCommand@CBdeUnlockUIController@@AEAAJPEAUIPopupWindow@@@Z
0x1400247B0: "void * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetStockObject(int)" ?GetStockObject@WARBIRD_DELAY_LOAD@@YAPEAXH@Z
0x140023C38: "class Microsoft::WRL::ComPtr<struct IPopupEventHandler> __cdecl Microsoft::WRL::Callback<struct IPopupEventHandler,class CBdeUnlockUIController,struct IPopupWindow * __ptr64>(class CBdeUnlockUIController * __ptr64,long (__cdecl CBdeUnlockUIController::*)(struct IPopupWindow * __ptr64) __ptr64)" ??$Callback@UIPopupEventHandler@@VCBdeUnlockUIController@@PEAUIPopupWindow@@@WRL@Microsoft@@YA?AV?$ComPtr@UIPopupEventHandler@@@01@PEAVCBdeUnlockUIController@@P83@EAAJPEAUIPopupWindow@@@Z@Z
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::GetUserPreferredUILanguages(unsigned long,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?GetUserPreferredUILanguages@WARBIRD_DELAY_LOAD@@YAHKPEAKPEAG0@Z
0x1400289A0: "__cdecl _imp_malloc" __imp_malloc
0x140028990: "__cdecl _imp__purecall" __imp__purecall
0x140028510: ADVAPI32_NULL_THUNK_DATA
0x140001080: "public: bool __cdecl VolumeFveStatus::HasExternalKey(void)const __ptr64" ?HasExternalKey@VolumeFveStatus@@QEBA_NXZ
0x14002BA58: "private: static unsigned short const * const CVolumeListener::szNotifySinkClass" ?szNotifySinkClass@CVolumeListener@@0QBGB
0x1400247B0: "struct HWINSTA__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetProcessWindowStation(void)" ?GetProcessWindowStation@WARBIRD_DELAY_LOAD@@YAPEAUHWINSTA__@@XZ
0x140028528: "__cdecl _imp_?GetPasswordId@BuiVolume@@QEAAJPEAPEAG@Z" __imp_?GetPasswordId@BuiVolume@@QEAAJPEAPEAG@Z
0x1400241A0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct IPopupEventHandler>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@UIPopupEventHandler@@@Details@WRL@Microsoft@@UEAAKXZ
0x140001914: "public: long __cdecl CBdeUnlockUIController::CreateAndShowFlyout(void) __ptr64" ?CreateAndShowFlyout@CBdeUnlockUIController@@QEAAJXZ
0x140029588: "__cdecl GUID_6a0017fe_df25_46eb_8a96_38df889cb5b1" _GUID_6a0017fe_df25_46eb_8a96_38df889cb5b1
0x140025A30: "__cdecl _report_gsfailure" __report_gsfailure
0x140001220: "public: bool __cdecl VolumeFveStatus::IsPreProvisioned(void)const __ptr64" ?IsPreProvisioned@VolumeFveStatus@@QEBA_NXZ
0x1400286A0: "__cdecl _imp_DeleteHandle" __imp_DeleteHandle
0x140024834: "public: void __cdecl SP<unsigned short,class SP_MEM<unsigned short> >::Reset(void) __ptr64" ?Reset@?$SP@GV?$SP_MEM@G@@@@QEAAXXZ
0x140028640: "__cdecl _imp_?CreateInstance@CSafeElementProxy@@SAJPEAVElement@DirectUI@@PEAPEAV1@@Z" __imp_?CreateInstance@CSafeElementProxy@@SAJPEAVElement@DirectUI@@PEAPEAV1@@Z
0x140001210: "public: bool __cdecl VolumeFveStatus::HasRecoveryData(void)const __ptr64" ?HasRecoveryData@VolumeFveStatus@@QEBA_NXZ
0x1400017E8: "public: void __cdecl CBdeUnlockUIController::Init(void) __ptr64" ?Init@CBdeUnlockUIController@@QEAAXXZ
0x140029048: "panelerrorunlock" ??_C@_1CC@GOGFMEMA@?$AAp?$AAa?$AAn?$AAe?$AAl?$AAe?$AAr?$AAr?$AAo?$AAr?$AAu?$AAn?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x140029318: "wrongpwd" ??_C@_1BC@MOEGGPJJ@?$AAw?$AAr?$AAo?$AAn?$AAg?$AAp?$AAw?$AAd?$AA?$AA@
0x140024790: "public: virtual bool __cdecl CSafeElementListenerCB::OnListenedPropertyChanging(class DirectUI::Element * __ptr64,struct DirectUI::PropertyInfo const * __ptr64,int,class DirectUI::Value * __ptr64,class DirectUI::Value * __ptr64) __ptr64" ?OnListenedPropertyChanging@CSafeElementListenerCB@@UEAA_NPEAVElement@DirectUI@@PEBUPropertyInfo@3@HPEAVValue@3@2@Z
0x140024340: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommand>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommand@@@WRL@Microsoft@@UEAAPEAXI@Z
0x14002F9B0: "__cdecl _native_startup_state" __native_startup_state
0x1400295A8: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400011D0: "public: bool __cdecl VolumeFveStatus::NeedsRestart(void)const __ptr64" ?NeedsRestart@VolumeFveStatus@@QEBA_NXZ
0x140024340: ??_E?$DelegateInvokeHelper@UIPopupCommandHandler@@V<lambda_8c362575297decb7b920620aeef3885d>@@$0?0PEAUIPopupWindow@@PEAUIPopupCommand@@@?$DelegateArgTraits@P8IPopupCommandHandler@@EAAJPEAUIPopupWindow@@PEAUIPopupCommand@@@Z@Details@WRL@Microsoft@@UEAAPEAXI@Z
0x140028838: "__cdecl _imp_SHChangeNotification_Lock" __imp_SHChangeNotification_Lock
0x140024828: "public: __cdecl COLORREF_COMPONENTS::COLORREF_COMPONENTS(unsigned long) __ptr64" ??0COLORREF_COMPONENTS@@QEAA@K@Z
0x1400243D0: "public: static void __cdecl Microsoft::WRL::DelegateTraits<-1>::EnsureStackSnapshot(long)" ?EnsureStackSnapshot@?$DelegateTraits@$0?0@WRL@Microsoft@@SAXJ@Z
0x140024A08: "__cdecl TlgDefineProvider_annotation__Tlgg_hBitLockerDelayProviderProv" _TlgDefineProvider_annotation__Tlgg_hBitLockerDelayProviderProv
0x140029550: "__cdecl GUID_ab54de2d_97d9_5528_b6ad_105afe156530" _GUID_ab54de2d_97d9_5528_b6ad_105afe156530
0x140001200: "public: bool __cdecl VolumeFveStatus::IsLocked(void)const __ptr64" ?IsLocked@VolumeFveStatus@@QEBA_NXZ
0x1400248E0: "public: class SP_MEM<unsigned char> & __ptr64 __cdecl SP_MEM<unsigned char>::operator=(unsigned char * __ptr64) __ptr64" ??4?$SP_MEM@E@@QEAAAEAV0@PEAE@Z
0x1400248E0: "public: class SP_MEM<unsigned long> & __ptr64 __cdecl SP_MEM<unsigned long>::operator=(unsigned long * __ptr64) __ptr64" ??4?$SP_MEM@K@@QEAAAEAV0@PEAK@Z
0x1400281C8: "const CBdeUnlockUIController::`vftable'{for `CSafeElementListenerCB'}" ??_7CBdeUnlockUIController@@6BCSafeElementListenerCB@@@
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::BitBlt(struct HDC__ * __ptr64,int,int,int,int,struct HDC__ * __ptr64,int,int,unsigned long)" ?BitBlt@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@HHHH0HHK@Z
0x140028668: "__cdecl _imp_UnInitProcessPriv" __imp_UnInitProcessPriv
0x140028660: "__cdecl _imp_?Detach@CSafeElementProxy@@QEAAXXZ" __imp_?Detach@CSafeElementProxy@@QEAAXXZ
0x14002CC04: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x140028988: "__cdecl _imp_??3@YAXPEAX@Z" __imp_??3@YAXPEAX@Z
0x140029010: "optionrecovery" ??_C@_1BO@DFCKHGFP@?$AAo?$AAp?$AAt?$AAi?$AAo?$AAn?$AAr?$AAe?$AAc?$AAo?$AAv?$AAe?$AAr?$AAy?$AA?$AA@
0x1400289E8: "__cdecl _imp__fmode" __imp__fmode
0x140028538: "__cdecl _imp_?UnlockWithPassphrase@BuiVolume@@QEAAJPEBGPEAH@Z" __imp_?UnlockWithPassphrase@BuiVolume@@QEAAJPEBGPEAH@Z
0x140024340: ??_G?$DelegateInvokeHelper@UIPopupEventHandler@@V<lambda_9361927196b2880cfd5741db7e56dede>@@$0?0PEAUIPopupWindow@@@?$DelegateArgTraits@P8IPopupEventHandler@@EAAJPEAUIPopupWindow@@@Z@Details@WRL@Microsoft@@UEAAPEAXI@Z
0x140024B10: "public: static long __cdecl CFveDriveType::CheckIsPortableDrive(unsigned short const * __ptr64,int * __ptr64)" ?CheckIsPortableDrive@CFveDriveType@@SAJPEBGPEAH@Z
0x140028DA0: "unsigned short const * const RuntimeClass_Windows_Data_Xml_Dom_XmlDocument" ?RuntimeClass_Windows_Data_Xml_Dom_XmlDocument@@3QBGB
0x140028608: "__cdecl _imp_?GetCheckedState@TouchCheckBox@DirectUI@@QEAA?AW4CheckedStateFlags@2@XZ" __imp_?GetCheckedState@TouchCheckBox@DirectUI@@QEAA?AW4CheckedStateFlags@2@XZ
0x14002C2E0: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x140029560: "__cdecl GUID_61c2402f_0ed0_5a18_ab69_59f4aa99a368" _GUID_61c2402f_0ed0_5a18_ab69_59f4aa99a368
0x140029088: "wrongvolumeerrcode" ??_C@_1CG@HHGIPINN@?$AAw?$AAr?$AAo?$AAn?$AAg?$AAv?$AAo?$AAl?$AAu?$AAm?$AAe?$AAe?$AAr?$AAr?$AAc?$AAo?$AAd?$AAe?$AA?$AA@
0x1400287C0: "__cdecl _imp_GetProcessMitigationPolicy" __imp_GetProcessMitigationPolicy
0x1400281A8: "const CBdeUnlockUIController::`vftable'{for `Windows::Foundation::ITypedEventHandler<class Windows::UI::Notifications::ToastNotification * __ptr64,class Windows::UI::Notifications::ToastDismissedEventArgs * __ptr64>'}" ??_7CBdeUnlockUIController@@6B?$ITypedEventHandler@PEAVToastNotification@Notifications@UI@Windows@@PEAVToastDismissedEventArgs@234@@Foundation@Windows@@@
0x140028560: "__cdecl _imp_?SetProxyObject@BuiVolume@@QEAAXPEAUIDispatch@@@Z" __imp_?SetProxyObject@BuiVolume@@QEAAXPEAUIDispatch@@@Z
0x140024834: "public: void __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Reset(void) __ptr64" ?Reset@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAXXZ
0x1400286C0: "__cdecl _imp_FveOpenVolumeW" __imp_FveOpenVolumeW
0x140028FF8: "unlockusb" ??_C@_1BE@CAEMMOHA@?$AAu?$AAn?$AAl?$AAo?$AAc?$AAk?$AAu?$AAs?$AAb?$AA?$AA@
0x140028870: "__cdecl _imp_ShellExecuteW" __imp_ShellExecuteW
0x140025EE0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400286A8: DUser_NULL_THUNK_DATA
0x1400280F0: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct IPopupCommand>::`vftable'" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@UIPopupCommand@@@WRL@Microsoft@@6B@
0x140001050: "public: bool __cdecl VolumeFveStatus::HasPinProtector(void)const __ptr64" ?HasPinProtector@VolumeFveStatus@@QEBA_NXZ
0x1400288B8: "__cdecl _imp_GetPropW" __imp_GetPropW
0x1400247B0: "int __cdecl WARBIRD_DELAY_LOAD::ReleaseDC(struct HWND__ * __ptr64,struct HDC__ * __ptr64)" ?ReleaseDC@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEAUHDC__@@@Z
0x1400248C4: "public: unsigned char * __ptr64 __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Detach(void) __ptr64" ?Detach@?$SP@EV?$SP_HLOCAL@E@@@@QEAAPEAEXZ
0x140026122: memset
0x14002CCE0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140028630: "__cdecl _imp_?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ" __imp_?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ
0x14002F908: "unsigned __int64 g_WarbirdPaintInitTime" ?g_WarbirdPaintInitTime@@3_KA
0x1400247B0: "unsigned long __cdecl WARBIRD_DELAY_LOAD::GetSysColor(int)" ?GetSysColor@WARBIRD_DELAY_LOAD@@YAKH@Z

[JEB Decompiler by PNF Software]