Import table
advapi32.dll
SetSecurityDescriptorDacl, OpenThreadToken, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, EqualSid, FreeSid, OpenSCManagerA, OpenServiceA, CloseServiceHandle, QueryServiceStatusEx, RegOpenKeyExA, RegQueryValueExW, RegCloseKey, InitializeSecurityDescriptor
kernel32.dll
Sleep, GetCurrentProcess, GetCurrentThread, FreeLibrary, GetProcAddress, LoadLibraryExA, WriteFile, QueryPerformanceCounter, CreateNamedPipeA, CompareStringW, CompareStringA, FlushFileBuffers, ReadFile, CreateFileA, WaitNamedPipeA, OpenEventA, CloseHandle, GetCurrentProcessId, GetCurrentThreadId, WideCharToMultiByte, GetModuleFileNameW, GetLastError, GetLongPathNameW, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, CreateEventA, InitializeCriticalSection, RtlUnwind, GetConsoleCP, GetConsoleMode, GetTimeFormatA, GetDateFormatA, SetFilePointer, GetFileAttributesA, GetSystemTimeAsFileTime, HeapFree, HeapAlloc, GetCommandLineA, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, GetModuleHandleW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RaiseException, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, MultiByteToWideChar, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, SetStdHandle, GetTimeZoneInformation, HeapCreate, HeapDestroy, VirtualFree, VirtualAlloc, HeapReAlloc, ExitProcess, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetTickCount, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, HeapSize, InitializeCriticalSectionAndSpinCount, SetEndOfFile, GetProcessHeap, LoadLibraryA, SetEnvironmentVariableA
user32.dll
LoadStringW, LoadStringA
Export table
CreateISACIntfcObj
CreateScanApiObj
DeinitForSAC
DeleteISACIntfcObj
DeleteScanApiObj
IgnoreSASProcessFromOPSForSAC
InitForSAC
QhCleanFileForSAC
QhCloseFileForSAC
QhDeinitScanForSAC
QhGetAPIVersionForSAC
QhGetOptionsForSAC
QhInitScanForSAC
QhOpenFileForSAC
QhScanFileForSAC
QhSetOptionsForSAC
UnIgnoreSASProcessFromOPSForSAC