GetLengthSid, RegCloseKey, RegOpenKeyExW, OpenThreadToken, AccessCheck, OpenSCManagerW, OpenServiceW, CloseServiceHandle, QueryServiceStatus, StartServiceW, AllocateAndInitializeSid, InitializeAcl, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegCreateKeyExW, SetServiceStatus, LsaNtStatusToWinError, RegisterServiceCtrlHandlerExW, SystemFunction036, RegisterEventSourceW, ReportEventW, DeregisterEventSource, FreeSid, RegEnumValueW, RegDeleteValueW, RegOpenKeyW, RegEnumKeyExW, RegDeleteKeyW, RegQueryValueExW, RegQueryInfoKeyW, RegSetValueExW

DnsNotifyResolver, DnsQueryConfigDword, DnsAsyncRegisterInit, DnsAsyncRegisterTerm, DnsAsyncRegisterHostAddrs, DnsRemoveRegistrations

IcmpSendEcho, IcmpCreateFile, AllocateAndGetIpForwardTableFromStack, SendARP, AllocateAndGetIfTableFromStack, AllocateAndGetIpAddrTableFromStack, GetIpAddrTable

FreeLibrary, TerminateThread, CreateThread, ResetEvent, WaitForMultipleObjects, SetLastError, HeapFree, GetProcessHeap, IsBadWritePtr, FormatMessageW, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetSystemTimeAsFileTime, GetCurrentProcess, SystemTimeToFileTime, GetSystemTime, SetWaitableTimer, CancelWaitableTimer, TerminateProcess, MultiByteToWideChar, Sleep, OpenEventA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentThread, DeviceIoControl, CreateSemaphoreW, DisableThreadLibraryCalls, ReleaseSemaphore, WaitForSingleObject, LocalFree, LocalAlloc, GetCurrentProcessId, GetLastError, CloseHandle, GetProcAddress, LoadLibraryA, CreateEventA, InterlockedIncrement, CreateEventW, GetVersionExW, OpenEventW, SetEvent, LeaveCriticalSection, EnterCriticalSection, PulseEvent, LoadLibraryW, CreateWaitableTimerW, GetComputerNameExW, DeleteCriticalSection, InitializeCriticalSection, InterlockedDecrement, CreateFileW

DllMain

RtlUnicodeStringToOemString, NlsMbOemCodePageTag, RtlxOemStringToUnicodeSize, RtlInitString, RtlOemStringToUnicodeString, NtClose, RtlNtStatusToDosError, RtlGUIDFromString, RtlInitUnicodeString, NtWaitForSingleObject, NtDeviceIoControlFile, NtCreateFile, RtlUpcaseUnicodeString, RtlCopySid, RtlDeleteSecurityObject, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, RtlNewSecurityObject, NtOpenProcessToken, NtOpenFile, NtCancelIoFile, NtConnectPort, NtRequestPort, RtlxUnicodeStringToOemSize

NdrClientCall2, RpcBindingFree, RpcBindingSetAuthInfoW, RpcBindingSetOption, RpcStringFreeW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcServerRegisterAuthInfoW, RpcServerUnregisterIfEx, RpcBindingVectorFree, RpcEpUnregister, RpcServerInqBindings, RpcStringBindingParseW, RpcBindingToStringBindingW, RpcEpRegisterW, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcImpersonateClient, UuidToStringW, NdrServerCall2, RpcRevertToSelf, UuidCreate

LsaUnregisterPolicyChangeNotification, LsaRegisterPolicyChangeNotification

MessageBoxW

WSACloseEvent, WSAResetEvent, WSAEventSelect, WSAEnumNetworkEvents, WSAWaitForMultipleEvents, WSACreateEvent, WSAIoctl, WSASetEvent