Import table
advapi32.dll
InitializeSecurityDescriptor, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegNotifyChangeKeyValue, CreateProcessAsUserW, RegOpenKeyExW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, GetSidLengthRequired, InitializeSid, GetSidSubAuthority, GetLengthSid, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, RegQueryValueExW, SetThreadToken, RegOpenKeyW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyExW, OpenProcessToken, DuplicateToken, RegCreateKeyExW, RegSetValueExW, RegCloseKey, DuplicateTokenEx, OpenThreadToken, WmiNotificationRegistrationW
kernel32.dll
SetEvent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, GetComputerNameW, QueueUserWorkItem, OpenProcess, lstrlenW, CreateEventA, GlobalFree, GlobalAlloc, lstrcpyW, lstrcpynW, GetSystemDirectoryW, VirtualFree, VirtualAlloc, GetExitCodeProcess, ResetEvent, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, CreateThread, LocalFree, LocalAlloc, GetLastError, WaitForMultipleObjects, CloseHandle, CreateEventW, WaitForSingleObject, FreeLibrary, GetProcAddress, LoadLibraryW, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, lstrcmpiW, WideCharToMultiByte, InterlockedDecrement, InterlockedIncrement, GetTickCount, Sleep, TerminateProcess, GetCurrentThread, WTSGetActiveConsoleSessionId, DisableThreadLibraryCalls, InterlockedExchange, InterlockedCompareExchange
msvcrt.dll
DllMain
ntdll.dll
NtWaitForSingleObject, NtClose, NtCreateFile, RtlInitUnicodeString, NtCancelIoFile, NtSetInformationThread, RtlOpenCurrentUser, RtlUnicodeStringToAnsiString, RtlAnsiStringToUnicodeString, RtlInitAnsiString, NtOpenFile, NtQuerySystemInformation, NtDeviceIoControlFile
rasman.dll
RasRpcGetInstalledProtocols, RasRpcGetInstalledProtocolsEx, RasRpcGetSystemDirectory, RasRpcGetUserPreferences, RasRpcSetUserPreferences, RasGetInfo
rpcrt4.dll
I_RpcExceptionFilter
rtutils.dll
RouterLogDeregisterW, RouterLogEventW, RouterLogRegisterW
tapi32.dll
lineShutdown, lineGetTranslateCapsW, lineGetMessage, lineInitializeExW
user32.dll
wsprintfW, CharNextW, CharPrevW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wmi.dll
WmiNotificationRegistrationW
wtsapi32.dll
WTSFreeMemory, WTSQueryUserToken, WTSQuerySessionInformationW
Export table
ServiceMain
SetAddressDisabledEx
