QueryServiceStatus, RegSetValueExW, RegOpenKeyExW, OpenThreadToken, AccessCheck, OpenSCManagerW, OpenServiceW, CloseServiceHandle, StartServiceW, AllocateAndInitializeSid, GetLengthSid, InitializeAcl, AddAccessAllowedAce, InitializeSecurityDescriptor, RegCreateKeyExW, SetServiceStatus, LsaNtStatusToWinError, RegisterServiceCtrlHandlerExW, SystemFunction036, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetSecurityDescriptorDacl, FreeSid, RegDeleteValueW, RegOpenKeyW, RegEnumKeyExW, RegDeleteKeyW, RegQueryValueExW, RegCloseKey

DnsAsyncRegisterHostAddrs, DnsNotifyResolver, DnsQueryConfigDword, DnsAsyncRegisterInit, DnsAsyncRegisterTerm, DnsRemoveRegistrations

IcmpSendEcho, IcmpCreateFile, SendARP, AllocateAndGetIfTableFromStack, AllocateAndGetIpAddrTableFromStack, GetIpAddrTable, AllocateAndGetIpForwardTableFromStack

CreateSemaphoreW, SetLastError, OpenEventW, HeapFree, IsBadWritePtr, FormatMessageW, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, SetUnhandledExceptionFilter, SystemTimeToFileTime, GetSystemTime, SetWaitableTimer, CancelWaitableTimer, MultiByteToWideChar, UnhandledExceptionFilter, Sleep, OpenEventA, DeviceIoControl, GetCurrentThread, CreateFileW, GetProcessHeap, WaitForMultipleObjects, ResetEvent, CreateThread, TerminateThread, LocalFree, LocalAlloc, GetCurrentProcessId, GetLastError, CloseHandle, GetProcAddress, LoadLibraryA, CreateEventA, InterlockedIncrement, CreateEventW, GetVersionExW, SetEvent, LeaveCriticalSection, EnterCriticalSection, PulseEvent, LoadLibraryW, CreateWaitableTimerW, GetComputerNameExW, DeleteCriticalSection, InitializeCriticalSection, InterlockedDecrement, WaitForSingleObject, ReleaseSemaphore, DisableThreadLibraryCalls, FreeLibrary

DllMain

RtlUnicodeStringToOemString, NlsMbOemCodePageTag, RtlxOemStringToUnicodeSize, RtlInitString, RtlOemStringToUnicodeString, NtClose, RtlNtStatusToDosError, RtlGUIDFromString, RtlInitUnicodeString, NtWaitForSingleObject, NtDeviceIoControlFile, NtCreateFile, RtlUpcaseUnicodeString, RtlCopySid, RtlDeleteSecurityObject, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, RtlNewSecurityObject, NtOpenProcessToken, NtCancelIoFile, NtConnectPort, NtRequestPort, RtlxUnicodeStringToOemSize

RpcBindingFree, RpcBindingSetAuthInfoW, RpcBindingSetOption, RpcStringFreeW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcServerRegisterAuthInfoW, RpcServerUnregisterIfEx, RpcBindingVectorFree, RpcEpUnregister, RpcServerInqBindings, RpcStringBindingParseW, RpcBindingToStringBindingW, RpcEpRegisterW, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcImpersonateClient, NdrServerCall2, RpcRevertToSelf, NdrClientCall2, UuidCreate

LsaRegisterPolicyChangeNotification, LsaUnregisterPolicyChangeNotification

MessageBoxW

WSAEventSelect, WSAEnumNetworkEvents, WSAIoctl, WSACreateEvent, WSAWaitForMultipleEvents, WSASetEvent, WSAResetEvent, WSACloseEvent