Import table
api-ms-win-core-processthreads-l1-1-0.dll
GetCurrentProcessId, GetCurrentThreadId, GetCurrentProcess, OpenProcessToken, TerminateProcess
api-ms-win-security-base-l1-1-0.dll
SetSecurityDescriptorDacl, GetAce, AddAccessDeniedAce, GetSecurityDescriptorLength, InitializeAcl, AdjustTokenPrivileges, GetLengthSid, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, MakeSelfRelativeSD, FreeSid, AddAccessAllowedAce, AllocateAndInitializeSid, SetSecurityDescriptorGroup
api-ms-win-security-sddl-l1-1-0.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
authz.dll
AuthzAccessCheck, AuthziInitializeAuditEvent, AuthziInitializeAuditParams, AuthziInitializeAuditEventType, AuthziLogAuditEvent, AuthzFreeAuditEvent, AuthziFreeAuditEventType
firewallapi.dll
FwIsRemoteManagementEnabled, FWChangeNotificationDestroy, FWChangeNotificationCreate
fwpuclnt.dll
IPsecSaContextCreateEnumHandle0, IPsecSaContextEnum0, IPsecSaContextDeleteById0, IkeextSaDeleteById0, FwpmIPsecTunnelAdd0, IPsecSaEnum0, IPsecSaDestroyEnumHandle0, IkeextSaCreateEnumHandle0, IkeextSaEnum0, FwpmFreeMemory0, IkeextSaDestroyEnumHandle0, IkeextGetStatistics0, FwpmEngineOpen0, IPsecGetStatistics0, FwpmEngineClose0, IkeextGetConfigParameters0, IkeextSetConfigParameters0, FwpmTransactionAbort0, FwpmProviderAdd0, FwpmTransactionBegin0, FwpmTransactionCommit0, FwpmProviderContextAdd0, FwpmProviderContextDeleteByKey0, FwpmFilterAdd0, FwpmFilterDeleteByKey0, FwpmIPsecTunnelDeleteByKey0, IPsecSaCreateEnumHandle0
fwremotesvr.dll
FwRpcAPIsInitialize, FwRpcAPIsShutdown
kernel32.dll
RegCreateKeyExW, InterlockedIncrement, HeapAlloc, GetProcessHeap, LeaveCriticalSection, ResetEvent, RegSetValueExW, CreateEventW, InitializeCriticalSectionAndSpinCount, GetModuleHandleW, GetLastError, CloseHandle, FormatMessageW, LocalFree, RegDeleteValueW, SetHandleInformation, EnterCriticalSection, HeapFree, InterlockedDecrement, WideCharToMultiByte, SetEvent, GetTickCount, WaitForMultipleObjects, RegEnumKeyExW, RegDeleteKeyExW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetSystemTimeAsFileTime, QueryPerformanceCounter, Sleep, InterlockedExchange, LoadLibraryExA, InterlockedCompareExchange, FreeLibrary, GetProcAddress, DelayLoadFailureHook, DeleteCriticalSection
msvcrt.dll
DllMain
ntdll.dll
EtwTraceMessage, EtwGetTraceEnableFlags, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwEventUnregister, EtwEventRegister, EtwEventWrite, WinSqmSetDWORD, EtwGetTraceEnableLevel
rpcrt4.dll
UuidCreate, RpcRevertToSelf, RpcImpersonateClient, RpcEpUnregister, RpcServerInqDefaultPrincNameW, RpcServerRegisterAuthInfoW, RpcServerUseProtseqW, RpcServerRegisterIfEx, RpcServerInqBindings, RpcEpRegisterW, RpcServerUnregisterIfEx, RpcBindingVectorFree, I_RpcBindingIsClientLocal, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingInqAuthClientW, RpcStringFreeW, RpcFreeAuthorizationContext, NdrServerCall2, UuidIsNil, RpcGetAuthorizationContextForClient