RegCloseKey RegSetValueExW RegCreateKeyExW EventWrite RegOpenKeyExW RegSetKeyValueW RegGetValueW RegEnumKeyExW RegDeleteValueW OpenProcessToken RegQueryValueExW EventRegister EventUnregister EventEnabled RegQueryInfoKeyW InitializeAcl InitializeSecurityDescriptor CopySid GetLengthSid IsValidSid SetSecurityDescriptorOwner SetSecurityDescriptorGroup GetTokenInformation AddAce GetAce GetAclInformation AddAccessAllowedAce StartServiceCtrlDispatcherW SetSecurityDescriptorDacl OpenThreadToken LookupAccountNameW SetServiceStatus RegisterServiceCtrlHandlerExW SetFileSecurityW ImpersonateLoggedOnUser GetSecurityDescriptorLength MakeSelfRelativeSD GetSidSubAuthority RevertToSelf MakeAbsoluteSD InitializeSid GetSidLengthRequired AddAccessDeniedAce LookupAccountSidW CreateWellKnownSid SetTokenInformation IsValidAcl DeregisterEventSource RegisterEventSourceW ReportEventW ConvertStringSecurityDescriptorToSecurityDescriptorA RegDeleteKeyTransactedW GetSecurityDescriptorControl GetSecurityDescriptorSacl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner RegCreateKeyTransactedW RegOpenKeyTransactedW CheckTokenMembership

InterlockedCompareExchange DelayLoadFailureHook HeapSetInformation GetCurrentProcessId SetPriorityClass SetEnvironmentVariableW CreateMutexW Sleep MultiByteToWideChar LoadLibraryW GetCurrentThreadId LeaveCriticalSection EnterCriticalSection GetProcessHeap HeapFree FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection RaiseException GetCurrentProcess GetNLSVersion OutputDebugStringW GetModuleFileNameW LoadLibraryExW InterlockedDecrement InterlockedIncrement GetSystemDirectoryW GetModuleHandleW GetModuleHandleExW GetProcAddress WideCharToMultiByte GetSystemDefaultLCID CompareStringW lstrcmpiW FreeLibrary lstrlenW FindFirstVolumeW FindNextVolumeW FindVolumeClose GetDriveTypeW GetVolumeInformationW SetLastError GetVolumePathNamesForVolumeNameW SetErrorMode GetLastError CloseHandle LoadLibraryExA GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetSystemPreferredUILanguages ResolveLocaleName LocaleNameToLCID CreateFileMappingW ReleaseMutex MapViewOfFile CopyFileA DeleteFileA FlushViewOfFile GetLocalTime CreateFileA FormatMessageW UnmapViewOfFile LCMapStringW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetTimeFormatW LocalFree CreateFileW lstrcmpW CompareFileTime RemoveDirectoryW FindFirstFileW GetCommandLineW DeleteFileW SearchPathW MoveFileW CopyFileW GetFileAttributesW SetFileAttributesW GetVersionExA HeapDestroy HeapAlloc HeapReAlloc HeapSize InterlockedExchange lstrlenA GetEnvironmentVariableW GetStartupInfoA SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter OutputDebugStringA VerifyVersionInfoW VerSetConditionMask GetVersionExW ExpandEnvironmentStringsW CreateThread WaitForSingleObject FindClose FindNextFileW FindFirstFileExW CreateDirectoryW OpenEventW GetCurrentThread SetEvent GetTickCount64 RegNotifyChangeKeyValue DuplicateHandle CreateEventW RegEnumValueW RegDeleteKeyExW

MsgWaitForMultipleObjects PeekMessageW UnregisterClassA UnregisterDeviceNotification RegisterDeviceNotificationW LoadStringW CharNextW DispatchMessageW

_except_handler4_common _onexit _lock __dllonexit _unlock ?terminate@@YAXXZ ??1type_info@@UAE@XZ __set_app_type __p__fmode __p__commode __setusermatherr _amsg_exit _initterm _acmdln exit _ismbblead realloc _exit _cexit __getmainargs calloc wcsncpy_s malloc memmove_s memcpy wcsrchr swscanf_s _wcsicmp free _wcsnicmp wcsncmp memcpy_s _vsnwprintf memset __CxxFrameHandler3 _CxxThrowException _errno _controlfp fprintf wcsstr wcspbrk _vscwprintf vswprintf_s qsort towupper bsearch _XcptFilter wcschr iswspace _wtol swscanf _vsnprintf strncmp _iob

NtOpenFile RtlInitUnicodeString RtlNtStatusToDosError WinSqmAddToStream WinSqmIncrementDWORD WinSqmSetDWORD WinSqmIsOptedIn

CoUninitialize CoInitializeEx CoTaskMemFree CoCreateInstance CoRevertToSelf CoTaskMemAlloc CoTaskMemRealloc CoRevokeClassObject CoRegisterClassObject CoInitializeSecurity CoImpersonateClient

SysFreeString SysAllocString SysStringLen VarBstrCat SysAllocStringLen SysAllocStringByteLen SysStringByteLen VariantInit VariantClear VarUI4FromStr LoadRegTypeLi LoadTypeLi

?ciDelete@@YGXPAX@Z ?ciNewNoThrow@@YGPAXI@Z ?ciNew@@YGPAXI@Z

PathIsUNCServerShareW SHGetValueW SHSetValueW PathAddBackslashW SHCopyKeyW PathRemoveBackslashW SHDeleteKeyW ord154 PathIsDirectoryW PathStripToRootW PathCanonicalizeW PathFindNextComponentW PathSkipRootW PathFileExistsW SHRegGetValueW SHStrDupW PathAppendW PathIsUNCW PathIsUNCServerW PathIsRootW

??0CSearchServiceObj@@QAE@XZ ?Cleanup@CSearchServiceObj@@SGHXZ ??1CSearchServiceObj@@QAE@XZ

ImmDisableIME