Generated by JEB on 2019/08/01

PE: C:\Windows\System32\reg.exe Base=0x140000000 SHA-256=19316D4266D0B776D9B2A05D5903D8CBC8F0EA1520E9C2A7E6D5960B6FA4DCAF
PDB: reg.pdb GUID={45D3F43F-A495-34DC-3B3AB8F929F64116} Age=1

508 located named symbols:
0x14000FE98: "/os" ??_C@_17DKKDOCJB@?$AA?1?$AAo?$AAs?$AA?$AA@
0x14000FE60: "/va" ??_C@_17OEGKCONG@?$AA?1?$AAv?$AAa?$AA?$AA@
0x140012740: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUxnwormvUoryUlyquivUznwGEUkxsOlyq@cmdline" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUxnwormvUoryUlyquivUznwGEUkxsOlyq@cmdline
0x14000DB1C: DynArrayRemove
0x14000C964: StringCompareExW
0x14000E0D0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000F2E0: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x14000F398: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x14000E4C0: "__cdecl FindPESection" _FindPESection
0x14000F268: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x140010E30: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x14000FCB8: "RESTORE" ??_C@_1BA@HPIMLPEN@?$AAR?$AAE?$AAS?$AAT?$AAO?$AAR?$AAE?$AA?$AA@
0x140001ACC: IsValidSubKey
0x14000FE3C: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x14000E4B0: "__cdecl wsetargv" _wsetargv
0x140012010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x14000FC90: "SeBackupPrivilege" ??_C@_1CE@MBNFGOEN@?$AAS?$AAe?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x14000F500: "__cdecl _imp_StrDupW" __imp_StrDupW
0x14000F628: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000F538: "__cdecl _imp_CharUpperW" __imp_CharUpperW
0x140010070: "REGEDIT: CreateFile failed, Get" ??_C@_1GE@BPAEPEFB@?$AAR?$AAE?$AAG?$AAE?$AAD?$AAI?$AAT?$AA?3?$AA?5?$AA?5?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?0?$AA?5?$AAG?$AAe?$AAt@
0x140010140: g_HexConversion
0x14000FD88: "z|ve|f|k|d|c|e|s|t|se" ??_C@_1CM@MILMJJBJ@?$AAz?$AA?$HM?$AAv?$AAe?$AA?$HM?$AAf?$AA?$HM?$AAk?$AA?$HM?$AAd?$AA?$HM?$AAc?$AA?$HM?$AAe?$AA?$HM?$AAs?$AA?$HM?$AAt?$AA?$HM?$AAs?$AAe?$AA?$AA@
0x14000F3C8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x14000FAA0: cwszRegDWordLittleEndian
0x14000C444: FindString2
0x14000F418: "__cdecl _imp_RegSaveKeyExW" __imp_RegSaveKeyExW
0x14000E810: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14000F2A0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x14000F508: "__cdecl _imp_StrChrIW" __imp_StrChrIW
0x14000F8B8: "REG" ??_C@_17NEIICPHG@?$AAR?$AAE?$AAG?$AA?$AA@
0x14000F4A0: "__cdecl _imp_RegConnectRegistryW" __imp_RegConnectRegistryW
0x140010190: s_FileLineBreak
0x14000D1EC: ParsePattern
0x14000F300: api-ms-win-core-file-l2-1-2_NULL_THUNK_DATA
0x14000FE90: "-od" ??_C@_17LFEIIKMK@?$AA?9?$AAo?$AAd?$AA?$AA@
0x14000FFE8: "DONT_VIRTUALIZE" ??_C@_1CA@GCGJBGL@?$AAD?$AAO?$AAN?$AAT?$AA_?$AAV?$AAI?$AAR?$AAT?$AAU?$AAA?$AAL?$AAI?$AAZ?$AAE?$AA?$AA@
0x14000FD34: "*?" ??_C@_15EAECJAPL@?$AA?$CK?$AA?$DP?$AA?$AA@
0x14000FE34: "0x" ??_C@_15OEMMNBIC@?$AA0?$AAx?$AA?$AA@
0x14000F868: "%-*s" ??_C@_19IMPABLI@?$AA?$CF?$AA?9?$AA?$CK?$AAs?$AA?$AA@
0x140010160: s_HexPrefix
0x1400101C0: "|%s|" ??_C@_19ONMJPOOG@?$AA?$HM?$AA?$CF?$AAs?$AA?$HM?$AA?$AA@
0x14000F758: "HKEY_CURRENT_CONFIG" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x14000CF08: FreeMemory
0x140008670: OutputValue
0x14000FF68: " REG_KEY_RECURSE_FLAG: %s " ??_C@_1DI@GCANJLCI@?$AA?7?$AAR?$AAE?$AAG?$AA_?$AAK?$AAE?$AAY?$AA_?$AAR?$AAE?$AAC?$AAU?$AAR?$AAS?$AAE?$AA_?$AAF?$AAL?$AAA?$AAG?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?6?$AA?$AA@
0x14000F5F0: "__cdecl _imp_wcstoul" __imp_wcstoul
0x14000F450: "__cdecl _imp_RegLoadKeyW" __imp_RegLoadKeyW
0x14000FD40: "QUERY" ??_C@_1M@OKPHEHKC@?$AAQ?$AAU?$AAE?$AAR?$AAY?$AA?$AA@
0x1400125E0: "__cdecl commode" _commode
0x14000DAC0: DynArrayAddColumns
0x14000F480: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x14000F2C0: "__cdecl _imp_GetFileType" __imp_GetFileType
0x14000FE68: "COMPARE" ??_C@_1BA@BMLMEGHD@?$AAC?$AAO?$AAM?$AAP?$AAA?$AAR?$AAE?$AA?$AA@
0x140010CA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-2-0
0x14000F410: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x140010CB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x14000FD04: "-y" ??_C@_15ODDIKHKC@?$AA?9?$AAy?$AA?$AA@
0x14000F680: "__cdecl _imp__memicmp" __imp__memicmp
0x14000F368: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x14000764C: CopyKeyNameFromLeftToRight
0x14000F420: "__cdecl _imp_RegFlushKey" __imp_RegFlushKey
0x14000D620: "__cdecl _DynArrayGetItem" __DynArrayGetItem
0x14000E390: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x14000F6B8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000F8C0: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x140003570: LoadHive
0x14000FCC8: "SeRestorePrivilege" ??_C@_1CG@LMBBLCJG@?$AAS?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x140010D04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-2" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-2
0x1400125EC: "__cdecl fmode" _fmode
0x1400015A4: ParseMachineName
0x14000F388: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14000F670: "__cdecl _imp_fgetwc" __imp_fgetwc
0x14000AEC8: PutBranch
0x14000FC80: "SAVE" ??_C@_19NNHMCLFE@?$AAS?$AAA?$AAV?$AAE?$AA?$AA@
0x14000C4E0: TrimString2
0x14000F2B0: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x14000F320: "__cdecl _imp_HeapValidate" __imp_HeapValidate
0x140010E1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x14000D194: GetBufferSize
0x1400100E8: s_WinNT50RegFileVersion
0x14000FDC0: "-ve" ??_C@_17CJCNLOPM@?$AA?9?$AAv?$AAe?$AA?$AA@
0x14000E3EE: "__cdecl XcptFilter" _XcptFilter
0x14000F438: "__cdecl _imp_RegSetValueExA" __imp_RegSetValueExA
0x14000F6C0: "__cdecl _xc_a" __xc_a
0x14000DD14: DynArrayGetItemType2
0x140007180: ParseCompareCmdLine
0x140012020: s_fTreatFileAsUnicode
0x14000D2BC: InternalRecursiveMatchPatternEx
0x140006360: ParseDeleteCmdLine
0x14000F4F8: "__cdecl _imp_StrStrIW" __imp_StrStrIW
0x14000999C: StringCchCopyW
0x14000F348: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x14000DB88: DynArrayGetCount2
0x14000BB20: SaveLastError
0x14000F2D8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x14000F238: "__cdecl _imp_WSACleanup" __imp_WSACleanup
0x14000F3B8: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x14000C200: FindChar2
0x14000F888: "%02X" ??_C@_19HHMHINIL@?$AA?$CF?$AA0?$AA2?$AAX?$AA?$AA@
0x14000FDF8: "/se" ??_C@_17DLMFCIDC@?$AA?1?$AAs?$AAe?$AA?$AA@
0x14000F2D0: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x14000F688: "__cdecl _imp_memset" __imp_memset
0x14000F2F0: api-ms-win-core-file-l1-2-0_NULL_THUNK_DATA
0x14000E67F: "__cdecl initterm" _initterm
0x14000BDA4: GetResString
0x140010DE0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140012738: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000F570: "__cdecl _imp_Sleep" __imp_Sleep
0x14000FEC8: "= " ??_C@_15FGOLOFBB@?$AA?$DN?$AA?5?$AA?$AA@
0x14000F9B0: cwszRegDWordBigEndian
0x14000F7B8: "HKCR" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x14000F6F0: "__cdecl _xi_z" __xi_z
0x14000F5B8: "__cdecl _imp___iob_func" __imp___iob_func
0x14000FFA0: "FLAGS" ??_C@_1M@PBCAJEEF@?$AAF?$AAL?$AAA?$AAG?$AAS?$AA?$AA@
0x14000F290: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000B724: GetInternalTemporaryBuffer
0x14000E0C4: "__cdecl _C_specific_handler" __C_specific_handler
0x14000F560: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x14000F858: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x14000FE78: "/oa" ??_C@_17MALDHNIF@?$AA?1?$AAo?$AAa?$AA?$AA@
0x14000FE18: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x14000C278: InString
0x14000F340: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14000F510: api-ms-win-core-shlwapi-obsolete-l1-1-0_NULL_THUNK_DATA
0x14000F748: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x14000F310: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x1400125F0: g_dwTotalKeysSaved
0x14000F430: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14000E6FC: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14000F9E0: cwszRegFullResourceDescriptor
0x1400101B0: cwszNullString
0x14000B4CC: RegDeleteKeyRecursive
0x14000F460: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x140001298: InitGlobalData
0x14000FC00: "COPY" ??_C@_19CDMOLDLE@?$AAC?$AAO?$AAP?$AAY?$AA?$AA@
0x140003CB4: RegAdjustTokenPrivileges
0x140010008: "DONT_SILENT_FAIL" ??_C@_1CC@ICFMMPHL@?$AAD?$AAO?$AAN?$AAT?$AA_?$AAS?$AAI?$AAL?$AAE?$AAN?$AAT?$AA_?$AAF?$AAA?$AAI?$AAL?$AA?$AA@
0x14000F488: "__cdecl _imp_RegUnLoadKeyW" __imp_RegUnLoadKeyW
0x14000BCC4: ReleaseGlobals
0x14000F530: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x14000F860: "%*s" ??_C@_17PEPGGFIG@?$AA?$CF?$AA?$CK?$AAs?$AA?$AA@
0x14000D8A0: DynArrayRemoveAll
0x14000D984: DynArrayAppendString
0x140010D18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x14000F408: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x14000E4A3: "__cdecl amsg_exit" _amsg_exit
0x14000F3E0: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x14000FEC0: "> " ??_C@_15NAHPJHLP@?$AA?$DO?$AA?5?$AA?$AA@
0x14000CD00: ShowMessageEx
0x1400090A0: FlagRegistry
0x14000C5F4: IsConsoleHandle
0x14000F618: "__cdecl _imp_exit" __imp_exit
0x14000F520: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x14000F85C: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x1400101B8: "%s " ??_C@_17GMPJMPF@?$AA?$CF?$AAs?$AA?5?$AA?$AA@
0x140006DF0: CompareRegistry
0x14000F490: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x140002BC8: CopyEnumerateKey
0x14000FD68: "/k" ??_C@_15FEOAJJLN@?$AA?1?$AAk?$AA?$AA@
0x14000FCF0: "LOAD" ??_C@_19LIDMLGEF@?$AAL?$AAO?$AAA?$AAD?$AA?$AA@
0x14000F298: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140004B48: QueryEnumValues
0x14000FEB0: "-on" ??_C@_17NKPFGKKO@?$AA?9?$AAo?$AAn?$AA?$AA@
0x14000F3E8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x14000B214: PutLiteral
0x14000F7C8: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x140012728: "__cdecl _native_startup_lock" __native_startup_lock
0x14000F498: "__cdecl _imp_RegOpenKeyW" __imp_RegOpenKeyW
0x1400055BC: AddRegistry
0x14000E3D0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000E760: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x140010D68: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x140010D54: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x14000F658: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14000FC70: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x14000F660: "__cdecl _imp__wcstoui64" __imp__wcstoui64
0x14000F4C8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x1400029C4: CopyValue
0x14000F380: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x14000C64C: IsConsoleFile
0x140004028: ParseQueryCmdLine
0x14000F280: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000538C: ParseTypeInfo
0x14000FE08: "/t" ??_C@_15FMJKNOHE@?$AA?1?$AAt?$AA?$AA@
0x14000E6D8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14000F4F0: "__cdecl _imp_StrChrW" __imp_StrChrW
0x14000F4C0: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x14000F698: "__cdecl _imp_NtSetInformationKey" __imp_NtSetInformationKey
0x14000F5E8: "__cdecl _imp__commode" __imp__commode
0x14000FB10: g_wszOptions
0x140005C3C: ParseAddCmdLine
0x14000F600: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140008754: PrintValue
0x14000FAD0: cwszRegMultiSz
0x14000F3D8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140010D2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x14000FC0C: "/f" ??_C@_15KGIKEBGA@?$AA?1?$AAf?$AA?$AA@
0x14000F468: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x14000FD80: "-v" ??_C@_15LLFLLHPE@?$AA?9?$AAv?$AA?$AA@
0x14000E570: "__cdecl ValidateImageBase" _ValidateImageBase
0x140001384: Prompt
0x140008F00: ParseImportCmdLine
0x14000D08C: ReallocateMemory
0x14000FD14: "-c" ??_C@_15NMJMBAFJ@?$AA?9?$AAc?$AA?$AA@
0x14000C024: AsLong
0x14000F800: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x140010DB8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x14000F720: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x14000F2E8: "__cdecl _imp_GetTempPathW" __imp_GetTempPathW
0x14000F318: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14000F518: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x14000AD10: ExportWinNT50RegFile
0x14000F878: "%s (%d)" ??_C@_1BA@FDFONNEJ@?$AA?$CF?$AAs?$AA?5?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?$AA@
0x14000F568: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x1400125E8: "__cdecl newmode" _newmode
0x14000F550: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x14000F5D0: "__cdecl _imp__fileno" __imp__fileno
0x14000FCFC: "/y" ??_C@_15KOPAAGKJ@?$AA?1?$AAy?$AA?$AA@
0x14000E6A8: "__cdecl _acrt_iob_func" __acrt_iob_func
0x140001F4C: GetTypeStrFromType
0x14000F5F8: "__cdecl _imp__initterm" __imp__initterm
0x14000F898: "0x%x" ??_C@_19PCNJIDGC@?$AA0?$AAx?$AA?$CF?$AAx?$AA?$AA@
0x14000DBD0: DynArrayItem2
0x14000F620: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140010D7C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x140010168: s_OldWin31RegFileRoot
0x14000AA6C: ParseEndOfLine
0x14000F278: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14000925C: QuerySetFlags
0x140010C78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x140010E6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x140009A24: StringCchPrintfW
0x140003BB8: ParseUnLoadCmdLine
0x140010DF4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x140010030: "RECURSE_FLAG" ??_C@_1BK@DMGDBMBL@?$AAR?$AAE?$AAC?$AAU?$AAR?$AAS?$AAE?$AA_?$AAF?$AAL?$AAA?$AAG?$AA?$AA@
0x14000ACCC: MatchChar
0x14000FDC8: "/d" ??_C@_15MIDIJOL@?$AA?1?$AAd?$AA?$AA@
0x14000FA50: cwszRegResourceList
0x140001F00: SaveErrorMessage
0x140012718: "__cdecl _onexitend" __onexitend
0x14000F598: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x14000F610: "__cdecl _imp__exit" __imp__exit
0x14000F6B0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14000F548: "__cdecl _imp_IsCharAlphaNumericW" __imp_IsCharAlphaNumericW
0x140008B3C: ParseExportCmdLine
0x14000F3D0: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000F650: "__cdecl _imp__resetstkoflw" __imp__resetstkoflw
0x14000F010: g_regTypes
0x14000F250: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x14000F648: "__cdecl _imp_wcstol" __imp_wcstol
0x14000A9A0: ParseHexDword
0x14000F590: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x14000F6D8: "__cdecl _xi_a" __xi_a
0x140010050: "HKEY_DYN_DATA" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x14000F580: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14000F270: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x14000E4B0: "__cdecl matherr" _matherr
0x140001CD4: Usage
0x140001008: wmain
0x14000F5A0: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x1400101A0: s_RegistryHeader
0x1400012F4: FreeGlobalData
0x14000F810: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x140004DC4: QueryEnumKeys
0x14000F4A8: "__cdecl _imp_RegSaveKeyW" __imp_RegSaveKeyW
0x14000FD70: "-k" ??_C@_15BJCIDILG@?$AA?9?$AAk?$AA?$AA@
0x140052780: g_ImportFileVersion
0x14000FC30: "/reg:32" ??_C@_1BA@MOJLNBII@?$AA?1?$AAr?$AAe?$AAg?$AA?3?$AA3?$AA2?$AA?$AA@
0x14000FC24: "-s" ??_C@_15IMIFEHMG@?$AA?9?$AAs?$AA?$AA@
0x14000B46C: FlushIoBuffer
0x14000FD30: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140010CDC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x14000F6A0: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x14000DA18: DynArrayAppendRow
0x14000E288: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x14000FA78: cwszRegBinary
0x14000A32C: ParseHeader
0x14000F258: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x1400101D4: "%s" ??_C@_02DKCKIIND@?$CFs?$AA@
0x140010E80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x14000FC1C: "/s" ??_C@_15MBENOGMN@?$AA?1?$AAs?$AA?$AA@
0x14000E0A0: "__cdecl _security_check_cookie" __security_check_cookie
0x14000F248: "__cdecl _imp_GetConsoleOutputCP" __imp_GetConsoleOutputCP
0x14000F6D0: "__cdecl _xc_z" __xc_z
0x140010CC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x14000FF28: " REG_KEY_DONT_SILENT_FAIL: %s " ??_C@_1DO@FMOLJDIG@?$AA?7?$AAR?$AAE?$AAG?$AA_?$AAK?$AAE?$AAY?$AA_?$AAD?$AAO?$AAN?$AAT?$AA_?$AAS?$AAI?$AAL?$AAE?$AAN?$AAT?$AA_?$AAF?$AAA?$AAI?$AAL?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x14000F3F0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140008DAC: ImportRegistry
0x14000FE00: "-se" ??_C@_17HJOACPEP@?$AA?9?$AAs?$AAe?$AA?$AA@
0x14000F750: "\\." ??_C@_17KDPFNGJO@?$AA?2?$AA?2?$AA?4?$AA?$AA@
0x14000AB90: GetChar
0x1400100DC: "] " ??_C@_15JBJAKFBB@?$AA?$FN?$AA?6?$AA?$AA@
0x14000C9BC: ShowMessage
0x14000B40C: PutChar
0x14000F5D8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000F5C0: "__cdecl _imp_fflush" __imp_fflush
0x14000F588: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x14000F330: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x14000F7F0: "HKCC" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x14000D4A0: MatchPatternEx
0x14000F3B0: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x14000F790: "HKEY_CURRENT_USER" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x14000F360: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x14000F5B0: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x14000A794: ParseString
0x14000F328: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140006194: DeleteRegistry
0x14000FEB8: "< " ??_C@_15JNLHDGLE@?$AA?$DM?$AA?5?$AA?$AA@
0x14000E830: "__cdecl _chkstk" __chkstk
0x140012760: s_FileIo
0x14000F4B8: "__cdecl _imp_RegSetValueW" __imp_RegSetValueW
0x14000FE50: "DELETE" ??_C@_1O@LPPHHL@?$AAD?$AAE?$AAL?$AAE?$AAT?$AAE?$AA?$AA@
0x14000A21C: ImportNewerRegFile
0x14000F668: "__cdecl _imp__errno" __imp__errno
0x14000F338: "__cdecl _imp_HeapSize" __imp_HeapSize
0x1400038B4: ParseSaveCmdLine
0x140012710: g_bWinsockLoaded
0x14000C784: StringCopyW
0x14000C718: StringCopyA
0x14000D65C: "__cdecl _DynArrayAppend" __DynArrayAppend
0x1400101CC: " " ??_C@_15DEJJBEOA@?$AA?5?$AA?7?$AA?$AA@
0x14000F4E0: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x14000F728: "-?|/?|-h|/h" ??_C@_1BI@NKKIMENJ@?$AA?9?$AA?$DP?$AA?$HM?$AA?1?$AA?$DP?$AA?$HM?$AA?9?$AAh?$AA?$HM?$AA?1?$AAh?$AA?$AA@
0x14000FE80: "-oa" ??_C@_17ICJGHKPI@?$AA?9?$AAo?$AAa?$AA?$AA@
0x14000F948: "DisableRegistryTools" ??_C@_1CK@FFGMOLAP@?$AAD?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AAT?$AAo?$AAo?$AAl?$AAs?$AA?$AA@
0x14000F528: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x140010100: s_WinNT50RegFileHeader
0x140010DA4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14000F400: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x14000F2F8: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x14000BBCC: ShowLastError
0x14000F6F8: "__cdecl _guard_fids_table" __guard_fids_table
0x14000F558: "__cdecl _imp_lstrcmpW" __imp_lstrcmpW
0x14000D870: CreateDynamicArray
0x14000F540: "__cdecl _imp_CharNextW" __imp_CharNextW
0x140010180: s_DwordPrefix
0x14000F690: msvcrt_NULL_THUNK_DATA
0x14000F130: "__cdecl load_config_used" _load_config_used
0x14000F5C8: "__cdecl _imp__get_osfhandle" __imp__get_osfhandle
0x1400101D8: cszSignature
0x14000CFE8: AllocateMemory
0x14000FEA0: "-os" ??_C@_17HIIGOFOM@?$AA?9?$AAo?$AAs?$AA?$AA@
0x140010D40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x14000FC14: "-f" ??_C@_15OLECOAGL@?$AA?9?$AAf?$AA?$AA@
0x140009F80: ImportWin31RegFile
0x14000F780: "HKCU" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x14000F630: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x14000C39C: FindOneOf2
0x14000FDB8: "/ve" ??_C@_17GLAILJIB@?$AA?1?$AAv?$AAe?$AA?$AA@
0x14000A488: ParseValue
0x1400016A0: ParseKeyName
0x140010E08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-shlwapi-obsolete-l1-1-0
0x14000FD0C: "/c" ??_C@_15JBFELBFC@?$AA?1?$AAc?$AA?$AA@
0x14000F378: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x14000F4D0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000F3F8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000FC60: "-reg:64" ??_C@_1BA@DMJNDKIE@?$AA?9?$AAr?$AAe?$AAg?$AA?3?$AA6?$AA4?$AA?$AA@
0x1400125E4: "__cdecl dowildcard" _dowildcard
0x14000F0D0: g_RegistryRoots
0x140009AA4: EditRegistryKey
0x14000FE10: "-t" ??_C@_15BBFCHPHP@?$AA?9?$AAt?$AA?$AA@
0x140008584: PrintKey
0x14000FE20: "%s " ??_C@_17MJEANDKP@?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x140002490: CopyRegistry
0x14000AB3C: SkipPastEndOfLine
0x140012714: g_bInitialized
0x14000FA38: cwszRegDWord
0x14000F4D8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14000F470: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x140003384: RestoreHive
0x14000E690: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000F3A0: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x14000F350: "__cdecl _imp_LocalReAlloc" __imp_LocalReAlloc
0x140005108: SearchData
0x14000FED8: "CLEAR" ??_C@_1M@IDCMGJNH@?$AAC?$AAL?$AAE?$AAA?$AAR?$AA?$AA@
0x14000E3FC: RtlpImageNtHeader
0x140001E54: RegConnectMachine
0x14000D6F4: "__cdecl _DynArrayFreeItemValue" __DynArrayFreeItemValue
0x14000FDD0: "-d" ??_C@_15EBELCIOA@?$AA?9?$AAd?$AA?$AA@
0x140003064: SaveHive
0x140010CF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x14000FEA8: "/on" ??_C@_17JINAGNND@?$AA?1?$AAo?$AAn?$AA?$AA@
0x14000F370: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000F4B0: "__cdecl _imp_RegEnumKeyW" __imp_RegEnumKeyW
0x14000D908: DestroyDynamicArray
0x14000C7C8: StringConcatW
0x14000AA08: ParseHexDigit
0x14000FE44: "," ??_C@_13DEFPDAGF@?$AA?0?$AA?$AA@
0x14000F5E0: "__cdecl _imp_fprintf" __imp_fprintf
0x14000888C: ExportRegistry
0x14000F638: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x14000F390: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x14000FEE8: " REG_KEY_DONT_VIRTUALIZE: %s " ??_C@_1DM@PCJGDJKA@?$AA?7?$AAR?$AAE?$AAG?$AA_?$AAK?$AAE?$AAY?$AA_?$AAD?$AAO?$AAN?$AAT?$AA_?$AAV?$AAI?$AAR?$AAT?$AAU?$AAA?$AAL?$AAI?$AAZ?$AAE?$AA?3?$AA?5?$AA?$CF?$AAs?$AA?6?$AA?$AA@
0x14000F978: cwszRegLink
0x14000F6A8: ntdll_NULL_THUNK_DATA
0x140001F98: ShowRegistryValue
0x140010E58: "__cdecl _IMPORT_DESCRIPTOR_WS2_32" __IMPORT_DESCRIPTOR_WS2_32
0x14000E6CC: "__cdecl _iob_func" __iob_func
0x14000FE28: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x14000BDDC: GetResString2FromModule
0x14000B634: InitGlobals
0x140004894: QueryValue
0x140007E6C: CompareEnumerateValueName
0x1400100F4: s_UnicodeByteOrderMark
0x14000FDF0: "-z" ??_C@_15PBINAIEM@?$AA?9?$AAz?$AA?$AA@
0x140012008: "__cdecl _security_cookie" __security_cookie
0x14000F448: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x14000E830: "__cdecl alloca_probe" _alloca_probe
0x14000F240: WS2_32_NULL_THUNK_DATA
0x14000CF94: CheckMemory
0x14000F308: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14000F358: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140012000: "__cdecl _defaultmatherr" __defaultmatherr
0x140010C8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x14000FDE8: "/z" ??_C@_15LMEFKJEH@?$AA?1?$AAz?$AA?$AA@
0x14000FC40: "-reg:32" ??_C@_1BA@EJDLPEOL@?$AA?9?$AAr?$AAe?$AAg?$AA?3?$AA3?$AA2?$AA?$AA@
0x14000FDE0: "-e" ??_C@_15PJPHEPIF@?$AA?9?$AAe?$AA?$AA@
0x14000F428: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x140012720: "__cdecl _onexitbegin" __onexitbegin
0x14000F840: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x14000FD20: "UNLOAD" ??_C@_1O@PAPHGGOK@?$AAU?$AAN?$AAL?$AAO?$AAA?$AAD?$AA?$AA@
0x1400100D4: " " ??_C@_15IABLJNFO@?$AA?6?$AA?6?$AA?$AA@
0x140009C00: ImportRegFileWorker
0x14000FD50: "/?|-?|/h|-h" ??_C@_1BI@KHLEFMMB@?$AA?1?$AA?$DP?$AA?$HM?$AA?9?$AA?$DP?$AA?$HM?$AA?1?$AAh?$AA?$HM?$AA?9?$AAh?$AA?$AA@
0x14000F640: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000A8A4: ParseHexSequence
0x14000B924: GetReason
0x14000F288: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000F8A8: "0x%I64x" ??_C@_1BA@KLJFELIK@?$AA0?$AAx?$AA?$CF?$AAI?$AA6?$AA4?$AAx?$AA?$AA@
0x14000B964: SetReason
0x14000FC50: "/reg:64" ??_C@_1BA@LLDNBPOH@?$AA?1?$AAr?$AAe?$AAg?$AA?3?$AA6?$AA4?$AA?$AA@
0x140003D7C: QueryRegistry
0x14000371C: UnLoadHive
0x14000F458: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x14000F260: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x14000C10C: IsNumeric
0x14000FA90: cwszRegSz
0x140002730: ParseCopyCmdLine
0x14000E5A4: "__cdecl _security_init_cookie" __security_init_cookie
0x140006A30: DeleteValues
0x1400082D0: CompareValues
0x1400022C8: GetTemporaryFileName
0x14000B2B8: PutBinary
0x14000F608: "__cdecl _imp__cexit" __imp__cexit
0x14000B244: PutString
0x14000F440: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x140006690: RecursiveDeleteKey
0x14000E458: "__cdecl get_image_app_type" _get_image_app_type
0x14000FFB0: "HKEY_LOCAL_MACHINE\SOFTWARE" ??_C@_1DI@CBEPDGBD@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?$AA@
0x140010C64: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000FED0: "SET" ??_C@_17FKIONHJJ@?$AAS?$AAE?$AAT?$AA?$AA@
0x14000C8D4: StringCompareW
0x14000E070: wmainCRTStartup
0x14000AB08: SkipWhitespace
0x14000F2A8: "__cdecl _imp_WriteFile" __imp_WriteFile
0x14000FA20: cwszRegNone
0x14000F2B8: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x14000F990: cwszRegExpandSz
0x14000F5A8: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x14000E110: "__cdecl _report_gsfailure" __report_gsfailure
0x14000F4E8: "__cdecl _imp_StrToIntW" __imp_StrToIntW
0x14000B390: PutDword
0x14000FAF0: cwszRegQWord
0x14000FE48: "ADD" ??_C@_17PPFFGFPF@?$AAA?$AAD?$AAD?$AA?$AA@
0x14000F3A8: "__cdecl _imp_SearchPathW" __imp_SearchPathW
0x140012730: "__cdecl _native_startup_state" __native_startup_state
0x140001B7C: IsRegDataType
0x14000FD78: "/v" ??_C@_15PGJDBGPP@?$AA?1?$AAv?$AA?$AA@
0x14000DC34: DynArraySetString
0x14000F838: "HKU" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x1400529A0: g_FileErrorStringID
0x14000F8D0: "Software\Microsoft\Windows\Curre" ??_C@_1HE@KMAPOOMM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140007760: CompareEnumerateKey
0x14000FE88: "/od" ??_C@_17PHGNINLH@?$AA?1?$AAo?$AAd?$AA?$AA@
0x14000D774: "__cdecl _DynArrayFind" __DynArrayFind
0x14000F678: "__cdecl _imp__fmode" __imp__fmode
0x1400527A0: g_ValueNameBuffer
0x140010DCC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x14000F478: "__cdecl _imp_RegRestoreKeyW" __imp_RegRestoreKeyW
0x14000D7F0: "__cdecl _DynArrayFindEx" __DynArrayFindEx
0x14000E510: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000F578: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x14000B9E4: SetReason2
0x140009618: ParseFlagsCmdLine
0x14000F3C0: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x140010E44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x14000BC08: ShowLastErrorEx
0x140010D90: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x14000F740: "\0" ??_C@_15MFFKGOHB@?$AA?2?$AA0?$AA?$AA@
0x14000FDD8: "/e" ??_C@_15LEDPOOIO@?$AA?1?$AAe?$AA?$AA@
0x14000E7F6: memset
0x140010E94: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140001440: BreakDownKeyString
0x14000F2C8: "__cdecl _imp_ReadFile" __imp_ReadFile

[JEB Decompiler by PNF Software]