Generated by JEB on 2019/08/01

PE: C:\Windows\System32\baaupdate.exe Base=0x140000000 SHA-256=9CF66EAF1B13F74CF0770F1B7CDB557889DDA61EAB13CE5ED2B7C324A711F16A
PDB: BaaUpdate.pdb GUID={E7AC8BD6-E745-3B5E-6D9327D855E374F0} Age=1

240 located named symbols:
0x140003454: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140003860: "__cdecl FindPESection" _FindPESection
0x140002BB4: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x140004370: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x1400053F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140004028: "const CVolumeListener::`vftable'" ??_7CVolumeListener@@6B@
0x1400043A0: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140006010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140002C8C: "public: __cdecl CVolumeListener::~CVolumeListener(void) __ptr64" ??1CVolumeListener@@QEAA@XZ
0x140001340: "public: class BuiVolume & __ptr64 __cdecl BuiVolume::operator=(class BuiVolume const & __ptr64) __ptr64" ??4BuiVolume@@QEAAAEAV0@AEBV0@@Z
0x1400041E0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400028B8: WinMain
0x140003B20: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140004308: SHELL32_NULL_THUNK_DATA
0x1400010A0: "public: bool __cdecl VolumeFveStatus::HasPassphraseProtector(void)const __ptr64" ?HasPassphraseProtector@VolumeFveStatus@@QEBA_NXZ
0x1400042C8: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x1400065C0: "__cdecl commode" _commode
0x140004258: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140003730: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140004438: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1400065CC: "__cdecl fmode" _fmode
0x140004170: "__cdecl _imp_?ManagementRequiresElevation@BuiVolume@@QEBA_NXZ" __imp_?ManagementRequiresElevation@BuiVolume@@QEBA_NXZ
0x140004268: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x1400041C8: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x140004610: FOLDERID_ComputerFolder
0x14000378E: "__cdecl XcptFilter" _XcptFilter
0x140004440: "__cdecl _xc_a" __xc_a
0x1400042A8: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x1400041C0: COMCTL32_NULL_THUNK_DATA
0x140004198: "__cdecl _imp_?Init@BuiVolume@@QEAAJPEAG@Z" __imp_?Init@BuiVolume@@QEAAJPEAG@Z
0x14000371D: "__cdecl callnewh" _callnewh
0x140003AF6: memcpy
0x1400043E0: "__cdecl _imp__acmdln" __imp__acmdln
0x140004420: "__cdecl _imp_memset" __imp_memset
0x140003A1F: "__cdecl initterm" _initterm
0x140006608: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140004238: "__cdecl _imp_Sleep" __imp_Sleep
0x140004470: "__cdecl _xi_z" __xi_z
0x140001100: "public: bool __cdecl VolumeFveStatus::IsOn(void)const __ptr64" ?IsOn@VolumeFveStatus@@QEBA_NXZ
0x140004210: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140004280: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x1400012B0: "public: unsigned long __cdecl VolumeFveStatus::GetStatusFlags(void)const __ptr64" ?GetStatusFlags@VolumeFveStatus@@QEBAKXZ
0x140003A2B: "__cdecl _C_specific_handler" __C_specific_handler
0x140004300: "__cdecl _imp_SHChangeNotification_Unlock" __imp_SHChangeNotification_Unlock
0x1400065E0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@ngscb_common_um" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@ngscb_common_um
0x140003711: malloc
0x140004348: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x140001260: "public: bool __cdecl VolumeFveStatus::IsEDriveVolume(void)const __ptr64" ?IsEDriveVolume@VolumeFveStatus@@QEBA_NXZ
0x1400045BC: ") " ??_C@_15MOKMKFJM@?$AA?$CJ?$AA?5?$AA?$AA@
0x140003A90: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140004240: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x140004328: "__cdecl _imp_RemovePropW" __imp_RemovePropW
0x1400065D8: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInst" ?g_hInst@@3PEAUHINSTANCE__@@EA
0x140001310: "public: class VolumeFveStatus & __ptr64 __cdecl VolumeFveStatus::operator=(class VolumeFveStatus &&) __ptr64" ??4VolumeFveStatus@@QEAAAEAV0@$$QEAV0@@Z
0x140003843: "__cdecl amsg_exit" _amsg_exit
0x1400043F8: "__cdecl _imp__callnewh" __imp__callnewh
0x140002E80: "private: static __int64 __cdecl CVolumeListener::NotifySinkProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?NotifySinkProc@CVolumeListener@@CA_JPEAUHWND__@@I_K_J@Z
0x140004380: "__cdecl _imp_exit" __imp_exit
0x1400010D0: "public: bool __cdecl VolumeFveStatus::IsOsCriticalVolume(void)const __ptr64" ?IsOsCriticalVolume@VolumeFveStatus@@QEBA_NXZ
0x1400011C0: "public: bool __cdecl VolumeFveStatus::IsSecure(void)const __ptr64" ?IsSecure@VolumeFveStatus@@QEBA_NXZ
0x1400010C0: "public: bool __cdecl VolumeFveStatus::IsOsVolume(void)const __ptr64" ?IsOsVolume@VolumeFveStatus@@QEBA_NXZ
0x140004368: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x140004180: "__cdecl _imp_?ServiceDiscoveryVolume@BuiVolume@@QEAAJXZ" __imp_?ServiceDiscoveryVolume@BuiVolume@@QEAAJXZ
0x1400041B8: "__cdecl _imp_TaskDialogIndirect" __imp_TaskDialogIndirect
0x140004340: "__cdecl _imp_RegisterClassExW" __imp_RegisterClassExW
0x1400042B8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400065F8: "__cdecl _native_startup_lock" __native_startup_lock
0x140003770: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400043F0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140004228: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400042C0: KERNEL32_NULL_THUNK_DATA
0x140004298: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140003050: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x140003A6C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1400012A0: "public: bool __cdecl VolumeFveStatus::IsDEAutoProvisioned(void)const __ptr64" ?IsDEAutoProvisioned@VolumeFveStatus@@QEBA_NXZ
0x140001110: "public: bool __cdecl VolumeFveStatus::IsPaused(void)const __ptr64" ?IsPaused@VolumeFveStatus@@QEBA_NXZ
0x1400043B8: "__cdecl _imp__commode" __imp__commode
0x1400043C8: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14000540C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1400041E8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140004248: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1400045B8: "(" ??_C@_13LLDNKHDC@?$AA?$CI?$AA?$AA@
0x1400041B0: BDEUI_NULL_THUNK_DATA
0x140003910: "__cdecl ValidateImageBase" _ValidateImageBase
0x140001040: "public: bool __cdecl VolumeFveStatus::HasTpmProtector(void)const __ptr64" ?HasTpmProtector@VolumeFveStatus@@QEBA_NXZ
0x140004310: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x140004188: "__cdecl _imp_BuisCreateProxyObject" __imp_BuisCreateProxyObject
0x1400065C8: "__cdecl newmode" _newmode
0x1400043D0: "__cdecl _imp__initterm" __imp__initterm
0x1400043E8: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140003850: "__cdecl setargv" _setargv
0x140004010: "const CVolumeRemovalListener::`vftable'" ??_7CVolumeRemovalListener@@6B@
0x140004168: "__cdecl _imp_??0BuiVolume@@QEAA@XZ" __imp_??0BuiVolume@@QEAA@XZ
0x1400041A0: "__cdecl _imp_??1BuiVolume@@QEAA@XZ" __imp_??1BuiVolume@@QEAA@XZ
0x140001230: "public: bool __cdecl VolumeFveStatus::FailedDryRun(void)const __ptr64" ?FailedDryRun@VolumeFveStatus@@QEBA_NXZ
0x1400065E8: "__cdecl _onexitend" __onexitend
0x140004250: "__cdecl _imp_CreateThread" __imp_CreateThread
0x1400043A8: "__cdecl _imp__exit" __imp__exit
0x140004430: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400042F0: "__cdecl _imp_SHGetKnownFolderIDList" __imp_SHGetKnownFolderIDList
0x140004338: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x1400042F8: "__cdecl _imp_SHChangeNotifyDeregister" __imp_SHChangeNotifyDeregister
0x1400041F8: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140004360: USER32_NULL_THUNK_DATA
0x140004318: "__cdecl _imp_DefWindowProcW" __imp_DefWindowProcW
0x140004190: "__cdecl _imp_?NeedsDiscoveryVolumeUpdate@BuiVolume@@QEAAJPEAH@Z" __imp_?NeedsDiscoveryVolumeUpdate@BuiVolume@@QEAAJPEAH@Z
0x140004150: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x140004458: "__cdecl _xi_a" __xi_a
0x1400041D0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140003850: "__cdecl matherr" _matherr
0x1400012C0: "public: unsigned __int64 __cdecl VolumeFveStatus::GetExtendedFlags(void)const __ptr64" ?GetExtendedFlags@VolumeFveStatus@@QEBA_KXZ
0x140002CD0: "public: virtual void __cdecl CVolumeListener::SetCritical(int) __ptr64" ?SetCritical@CVolumeListener@@UEAAXH@Z
0x1400045C4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140003608: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x140004200: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x1400042A0: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x1400053BC: "__cdecl _IMPORT_DESCRIPTOR_COMCTL32" __IMPORT_DESCRIPTOR_COMCTL32
0x140003044: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140003430: "__cdecl _security_check_cookie" __security_check_cookie
0x1400053E4: "__cdecl _IMPORT_DESCRIPTOR_BDEUI" __IMPORT_DESCRIPTOR_BDEUI
0x140004450: "__cdecl _xc_z" __xc_z
0x140001070: "public: bool __cdecl VolumeFveStatus::HasPBKDF2RecoveryPassword(void)const __ptr64" ?HasPBKDF2RecoveryPassword@VolumeFveStatus@@QEBA_NXZ
0x1400012D0: "public: long __cdecl VolumeFveStatus::GetLastConvertStatus(void)const __ptr64" ?GetLastConvertStatus@VolumeFveStatus@@QEBAJXZ
0x140004408: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400041D8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140004278: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140004230: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140003B40: "__cdecl _chkstk" __chkstk
0x1400065D0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmthxyUxlimvihglmvUyzzUfkwzgvUlyquivUznwGEUkivxlnkOlyq@BaaUpdate" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmthxyUxlimvihglmvUyzzUfkwzgvUlyquivUznwGEUkivxlnkOlyq@BaaUpdate
0x140001160: "public: bool __cdecl VolumeFveStatus::IsEncrypting(void)const __ptr64" ?IsEncrypting@VolumeFveStatus@@QEBA_NXZ
0x1400042D0: "__cdecl _imp_SHGetPathFromIDListEx" __imp_SHGetPathFromIDListEx
0x140001280: "public: bool __cdecl VolumeFveStatus::IsUnknownFveVersion(void)const __ptr64" ?IsUnknownFveVersion@VolumeFveStatus@@QEBA_NXZ
0x1400012E0: "protected: __cdecl VolumeFveStatus::VolumeFveStatus(void) __ptr64" ??0VolumeFveStatus@@IEAA@XZ
0x140004478: "__cdecl _guard_fids_table" __guard_fids_table
0x140004428: msvcrt_NULL_THUNK_DATA
0x140004040: "__cdecl load_config_used" _load_config_used
0x1400042E0: "__cdecl _imp_ILFree" __imp_ILFree
0x1400012F0: "public: class VolumeFveStatus & __ptr64 __cdecl VolumeFveStatus::operator=(class VolumeFveStatus const & __ptr64) __ptr64" ??4VolumeFveStatus@@QEAAAEAV0@AEBV0@@Z
0x140004590: "public: static unsigned int const BuiVolume::NO_DRIVE_LETTER" ?NO_DRIVE_LETTER@BuiVolume@@2IB
0x140004598: "Local\BaaUpdate" ??_C@_1CA@NKHHDCGG@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAB?$AAa?$AAa?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x140003000: "private: static long __cdecl CVolumeListener::GetModule(struct HINSTANCE__ * __ptr64 * __ptr64)" ?GetModule@CVolumeListener@@CAJPEAPEAUHINSTANCE__@@@Z
0x1400045C8: "private: static unsigned short const * const CVolumeListener::szInstanceProperty" ?szInstanceProperty@CVolumeListener@@0QBGB
0x140005394: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140004398: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140001180: "public: bool __cdecl VolumeFveStatus::IsDecrypting(void)const __ptr64" ?IsDecrypting@VolumeFveStatus@@QEBA_NXZ
0x1400010B0: "public: bool __cdecl VolumeFveStatus::HasSmartCardProtector(void)const __ptr64" ?HasSmartCardProtector@VolumeFveStatus@@QEBA_NXZ
0x140004350: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x1400041A8: "__cdecl _imp_?ClearProxyObject@BuiVolume@@QEAAXXZ" __imp_?ClearProxyObject@BuiVolume@@QEAAXXZ
0x140004220: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400041F0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400065C4: "__cdecl dowildcard" _dowildcard
0x140002690: "protected: virtual void __cdecl CVolumeRemovalListener::OnEvent(long,unsigned short const * __ptr64) __ptr64" ?OnEvent@CVolumeRemovalListener@@MEAAXJPEBG@Z
0x140001010: "public: __cdecl VolumeFveStatus::VolumeFveStatus(unsigned long,unsigned __int64,long,enum _FVE_WIPING_STATE) __ptr64" ??0VolumeFveStatus@@QEAA@K_KJW4_FVE_WIPING_STATE@@@Z
0x140003705: free
0x140004218: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140003A60: "__cdecl purecall" _purecall
0x140003A40: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000379C: RtlpImageNtHeader
0x140001150: "public: bool __cdecl VolumeFveStatus::IsPartiallyConverted(void)const __ptr64" ?IsPartiallyConverted@VolumeFveStatus@@QEBA_NXZ
0x140001090: "public: bool __cdecl VolumeFveStatus::HasStartupKeyProtector(void)const __ptr64" ?HasStartupKeyProtector@VolumeFveStatus@@QEBA_NXZ
0x140002CF0: "public: virtual long __cdecl CVolumeListener::Initialize(void) __ptr64" ?Initialize@CVolumeListener@@UEAAJXZ
0x140004270: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x140001270: "public: bool __cdecl VolumeFveStatus::IsCsvMetadataVolume(void)const __ptr64" ?IsCsvMetadataVolume@VolumeFveStatus@@QEBA_NXZ
0x1400011A0: "public: bool __cdecl VolumeFveStatus::IsWiping(void)const __ptr64" ?IsWiping@VolumeFveStatus@@QEBA_NXZ
0x140004418: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140004358: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x140004410: "__cdecl _imp_memcpy" __imp_memcpy
0x1400043C0: "__cdecl _imp__ismbblead" __imp__ismbblead
0x140002F24: "private: void __cdecl CVolumeListener::DispatchEvent(unsigned __int64,__int64) __ptr64" ?DispatchEvent@CVolumeListener@@AEAAX_K_J@Z
0x140001190: "public: bool __cdecl VolumeFveStatus::IsDecrypted(void)const __ptr64" ?IsDecrypted@VolumeFveStatus@@QEBA_NXZ
0x140006008: "__cdecl _security_cookie" __security_cookie
0x140003B40: "__cdecl alloca_probe" _alloca_probe
0x1400011E0: "public: bool __cdecl VolumeFveStatus::IsDisabled(void)const __ptr64" ?IsDisabled@VolumeFveStatus@@QEBA_NXZ
0x140004178: "__cdecl _imp_BuisCreateElevatedProxyObject" __imp_BuisCreateElevatedProxyObject
0x140004290: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400042E8: "__cdecl _imp_SHChangeNotifyRegister" __imp_SHChangeNotifyRegister
0x140004288: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140006000: "__cdecl _defaultmatherr" __defaultmatherr
0x140004378: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x140004330: "__cdecl _imp_SetPropW" __imp_SetPropW
0x1400042B0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1400010F0: "public: bool __cdecl VolumeFveStatus::IsRoamingDevice(void)const __ptr64" ?IsRoamingDevice@VolumeFveStatus@@QEBA_NXZ
0x1400065F0: "__cdecl _onexitbegin" __onexitbegin
0x140001060: "public: bool __cdecl VolumeFveStatus::HasRecoveryPassword(void)const __ptr64" ?HasRecoveryPassword@VolumeFveStatus@@QEBA_NXZ
0x140004208: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1400031C0: WinMainCRTStartup
0x140001130: "public: bool __cdecl VolumeFveStatus::IsConverting(void)const __ptr64" ?IsConverting@VolumeFveStatus@@QEBA_NXZ
0x140005380: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140001170: "public: bool __cdecl VolumeFveStatus::IsEncrypted(void)const __ptr64" ?IsEncrypted@VolumeFveStatus@@QEBA_NXZ
0x140003944: "__cdecl _security_init_cookie" __security_init_cookie
0x1400043B0: "__cdecl _imp__cexit" __imp__cexit
0x1400037F8: "__cdecl get_image_app_type" _get_image_app_type
0x1400053A8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140004388: "__cdecl _imp_malloc" __imp_malloc
0x140004400: "__cdecl _imp__purecall" __imp__purecall
0x140004158: ADVAPI32_NULL_THUNK_DATA
0x140001080: "public: bool __cdecl VolumeFveStatus::HasExternalKey(void)const __ptr64" ?HasExternalKey@VolumeFveStatus@@QEBA_NXZ
0x1400045F0: "private: static unsigned short const * const CVolumeListener::szNotifySinkClass" ?szNotifySinkClass@CVolumeListener@@0QBGB
0x140003490: "__cdecl _report_gsfailure" __report_gsfailure
0x140001220: "public: bool __cdecl VolumeFveStatus::IsPreProvisioned(void)const __ptr64" ?IsPreProvisioned@VolumeFveStatus@@QEBA_NXZ
0x140001210: "public: bool __cdecl VolumeFveStatus::HasRecoveryData(void)const __ptr64" ?HasRecoveryData@VolumeFveStatus@@QEBA_NXZ
0x140006600: "__cdecl _native_startup_state" __native_startup_state
0x1400011D0: "public: bool __cdecl VolumeFveStatus::NeedsRestart(void)const __ptr64" ?NeedsRestart@VolumeFveStatus@@QEBA_NXZ
0x1400042D8: "__cdecl _imp_SHChangeNotification_Lock" __imp_SHChangeNotification_Lock
0x140004260: "__cdecl _imp_ExitThread" __imp_ExitThread
0x140001200: "public: bool __cdecl VolumeFveStatus::IsLocked(void)const __ptr64" ?IsLocked@VolumeFveStatus@@QEBA_NXZ
0x1400053D0: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x1400043D8: "__cdecl _imp__fmode" __imp__fmode
0x140001E70: "unsigned long __cdecl _ProgressDlgThread(void * __ptr64)" ?_ProgressDlgThread@@YAKPEAX@Z
0x140004160: "__cdecl _imp_?SetProxyObject@BuiVolume@@QEAAXPEAUIDispatch@@@Z" __imp_?SetProxyObject@BuiVolume@@QEAAXPEAUIDispatch@@@Z
0x140004390: "__cdecl _imp_free" __imp_free
0x1400038B0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x140004148: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x140001050: "public: bool __cdecl VolumeFveStatus::HasPinProtector(void)const __ptr64" ?HasPinProtector@VolumeFveStatus@@QEBA_NXZ
0x140004320: "__cdecl _imp_GetPropW" __imp_GetPropW
0x140003B02: memset
0x140005420: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]