Generated by JEB on 2019/08/01

PE: C:\Windows\System32\sc.exe Base=0x140000000 SHA-256=78097C7CD0E57902536C60B7FA17528C313DB20869E5F944223A0BA4C801D39B
PDB: sc.pdb GUID={9FEE19C1-DB60-3838-67B097B98402844E} Age=1

601 located named symbols:
0x140014040: "__cdecl _imp_EnumServicesStatusExW" __imp_EnumServicesStatusExW
0x1400091F0: ShowSecurity
0x14000E7C0: "adapt" ??_C@_1M@BMOPCHNC@?$AAa?$AAd?$AAa?$AAp?$AAt?$AA?$AA@
0x1400125F0: "__cdecl _hmod__api_ms_win_service_core_l1_1_1_dll" __hmod__api_ms_win_service_core_l1_1_1_dll
0x14000B6C8: "(interactive)" ??_C@_1BM@PKDMIHNF@?$AA?$CI?$AAi?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$CJ?$AA?$AA@
0x1400020A4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140002B07: "__cdecl _imp_load_DeleteService" __imp_load_DeleteService
0x14000BC48: FIREWALL_PORT_OPEN_GUID
0x14000B298: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x140002490: "__cdecl FindPESection" _FindPESection
0x14000F010: "DRIVER " ??_C@_1BA@LGKHLAMC@?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AA?$AA@
0x14000EAA8: "actions=" ??_C@_1BC@KMLGKPNG@?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AAs?$AA?$DN?$AA?$AA@
0x14000F0A8: "PAUSED " ??_C@_1BA@KENGFBND@?$AAP?$AAA?$AAU?$AAS?$AAE?$AAD?$AA?5?$AA?$AA@
0x140002711: "__cdecl _imp_load_CryptBinaryToStringW" __imp_load_CryptBinaryToStringW
0x140002B85: "__cdecl _imp_load_CryptStringToBinaryW" __imp_load_CryptStringToBinaryW
0x14000B638: "config" ??_C@_1O@NEJONDGE@?$AAc?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x14000EF28: "USER_OWN_PROCESS INSTANCE " ??_C@_1DG@LDGJPEDM@?$AAU?$AAS?$AAE?$AAR?$AA_?$AAO?$AAW?$AAN?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AAI?$AAN?$AAS?$AAT?$AAA?$AAN?$AAC?$AAE?$AA?5?$AA?$AA@
0x14000F6C0: DOMAIN_LEAVE_GUID
0x140001010: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x14000E080: "error" ??_C@_1M@BAIGDEFI@?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?$AA@
0x14001071C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x140002480: "__cdecl wsetargv" _wsetargv
0x140009BF0: SVCCTL_HANDLEW_unbind
0x1400019D0: DisplayStatus
0x14000BAF0: "CryptBinaryToString: Binary to s" ??_C@_1GC@PBIMLEDC@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AAT?$AAo?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AA?5?$AAt?$AAo?$AA?5?$AAs@
0x140012010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x14000B400: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x140002B19: "__cdecl _imp_load_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_load_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x14000EC20: "QueryServiceObjectSecurity" ??_C@_1DG@NNGLKLIK@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x14000B310: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x14000E390: "restricted" ??_C@_1BG@PONKBFLJ@?$AAr?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x14000E838: "severe" ??_C@_1O@CBPFPLEF@?$AAs?$AAe?$AAv?$AAe?$AAr?$AAe?$AA?$AA@
0x14000B480: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x14000E090: "none" ??_C@_19OEJGHIEG@?$AAn?$AAo?$AAn?$AAe?$AA?$AA@
0x140002E10: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140014038: "__cdecl _imp_EnumDependentServicesW" __imp_EnumDependentServicesW
0x140002997: "__cdecl _imp_load_StartServiceW" __imp_load_StartServiceW
0x140014070: "__cdecl _imp_StartServiceW" __imp_StartServiceW
0x14000E068: "interact" ??_C@_1BC@FJBNADNK@?$AAi?$AAn?$AAt?$AAe?$AAr?$AAa?$AAc?$AAt?$AA?$AA@
0x140005AAC: ChangeServiceFailure
0x14000F1B8: "WIN32" ??_C@_1M@EKLNDDIP@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA?$AA@
0x140009CB0: SC_MIDL_user_allocate
0x140009A7C: QueryServiceLockStatusW
0x140002B61: "__cdecl _imp_load_QueryServiceStatus" __imp_load_QueryServiceStatus
0x140010068: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_2_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_2_dll
0x140014088: "__cdecl _imp_CreateServiceW" __imp_CreateServiceW
0x14000F100: "GetServiceConfig: LocalAlloc" ??_C@_1DK@HMFFIDDI@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x14000E700: "showrights" ??_C@_1BG@GDIKNMDC@?$AAs?$AAh?$AAo?$AAw?$AAr?$AAi?$AAg?$AAh?$AAt?$AAs?$AA?$AA@
0x140008EA0: SendControlToService
0x14000EA68: "infinite" ??_C@_1BC@MDMKMOJA@?$AAi?$AAn?$AAf?$AAi?$AAn?$AAi?$AAt?$AAe?$AA?$AA@
0x14000F5A0: "CryptStringToBinary: Hex data st" ??_C@_1HE@KOMDHLGK@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAT?$AAo?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AA?3?$AA?5?$AAH?$AAe?$AAx?$AA?5?$AAd?$AAa?$AAt?$AAa?$AA?5?$AAs?$AAt@
0x14000E550: "DeleteService" ??_C@_1BM@ONBDJDPG@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140010088: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_private_l1_1_0_dll
0x14000B680: "interrogate" ??_C@_1BI@GGFBFJPK@?$AAi?$AAn?$AAt?$AAe?$AAr?$AAr?$AAo?$AAg?$AAa?$AAt?$AAe?$AA?$AA@
0x1400125C0: "__cdecl commode" _commode
0x14000F6E8: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x14000EA90: "command=" ??_C@_1BC@MFLIONFO@?$AAc?$AAo?$AAm?$AAm?$AAa?$AAn?$AAd?$AA?$DN?$AA?$AA@
0x14000B288: "__cdecl _imp_GetFileType" __imp_GetFileType
0x1400140D8: "__cdecl _imp_QueryServiceObjectSecurity" __imp_QueryServiceObjectSecurity
0x140010604: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x140008DBC: QueryServiceConfigp
0x14000B2C0: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x1400104D0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x14000B438: "__cdecl _imp_wcschr" __imp_wcschr
0x14000E6F0: "sdshow" ??_C@_1O@ICCEOHOO@?$AAs?$AAd?$AAs?$AAh?$AAo?$AAw?$AA?$AA@
0x14000EDF8: "QueryServiceLockStatus" ??_C@_1CO@LBLKOIB@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAL?$AAo?$AAc?$AAk?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x14000787C: GetConfigInfo
0x14000F4E8: "domainleave" ??_C@_1BI@JGJNHAIP@?$AAd?$AAo?$AAm?$AAa?$AAi?$AAn?$AAl?$AAe?$AAa?$AAv?$AAe?$AA?$AA@
0x14000B2A0: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140008C1C: LockServiceActiveDatabase
0x140002360: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x14000B740: "ACCEPTS_SHUTDOWN" ??_C@_1CC@JJDGCOKC@?$AAA?$AAC?$AAC?$AAE?$AAP?$AAT?$AAS?$AA_?$AAS?$AAH?$AAU?$AAT?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x14000B4A8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000E050: "service" ??_C@_1BA@JDIOHJOE@?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1400104E0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x1400140E0: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLA
0x1400140A0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x1400104A8: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLB
0x140010168: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x1400101A8: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLN
0x1400125CC: "__cdecl fmode" _fmode
0x140008744: GetServiceLockStatus
0x14000B2E0: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14000B428: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x140005944: APINeedsLargerBuffer
0x14000E588: "NotifyBootConfigStatus" ??_C@_1CO@DNFLAEFA@?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAB?$AAo?$AAo?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x1400028C4: "__cdecl _imp_load_QueryServiceConfig2W" __imp_load_QueryServiceConfig2W
0x14000F168: "WIN32_OWN_PROCESS" ??_C@_1CE@BHEFKKMN@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA_?$AAO?$AAW?$AAN?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?$AA@
0x140014110: "__cdecl _imp_QueryServiceStatus" __imp_QueryServiceStatus
0x14000B390: "__cdecl _imp_GetSecurityDescriptorControl" __imp_GetSecurityDescriptorControl
0x14000B530: "OpenService" ??_C@_1BI@BPEMHDAO@?$AAO?$AAp?$AAe?$AAn?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1400023BE: "__cdecl XcptFilter" _XcptFilter
0x14000B4B0: "__cdecl _xc_a" __xc_a
0x1400060C4: ChangeServiceRequiredPrivileges
0x14000EF60: "USER_SHARE_PROCESS INSTANCE " ??_C@_1DK@LFHIDNNC@?$AAU?$AAS?$AAE?$AAR?$AA_?$AAS?$AAH?$AAA?$AAR?$AAE?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AAI?$AAN?$AAS?$AAT?$AAA?$AAN?$AAC?$AAE?$AA?5?$AA?$AA@
0x140002B97: "__cdecl _imp_load_QueryLocalUserServiceName" __imp_load_QueryLocalUserServiceName
0x140009550: StringCbCopyW
0x14000E8B0: "SendConfigToService: LocalAlloc" ??_C@_1EA@DAKINJJC@?$AAS?$AAe?$AAn?$AAd?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAT?$AAo?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x14000BBF8: NAMED_PIPE_EVENT_GUID
0x14000F278: "AUTO_START" ??_C@_1BG@CBINJKFF@?$AAA?$AAU?$AAT?$AAO?$AA_?$AAS?$AAT?$AAA?$AAR?$AAT?$AA?$AA@
0x14000F2C0: "DEMAND_START" ??_C@_1BK@CLMNCCOB@?$AAD?$AAE?$AAM?$AAA?$AAN?$AAD?$AA_?$AAS?$AAT?$AAA?$AAR?$AAT?$AA?$AA@
0x14000E0C0: "adapter" ??_C@_1BA@OFLHGEOF@?$AAa?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
0x14000F568: "rpcinterface" ??_C@_1BK@NIOKIJKI@?$AAr?$AAp?$AAc?$AAi?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x14000E770: "ControlService" ??_C@_1BO@OEEIJKOC@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140014050: "__cdecl _imp_GetServiceKeyNameW" __imp_GetServiceKeyNameW
0x14000B2A8: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x14000F458: "lvlcustom" ??_C@_1BE@BMLALALA@?$AAl?$AAv?$AAl?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?$AA@
0x140014030: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x14000B648: "stop" ??_C@_19LLIMCLGL@?$AAs?$AAt?$AAo?$AAp?$AA?$AA@
0x14000E7B8: "rec" ??_C@_17FACHAHP@?$AAr?$AAe?$AAc?$AA?$AA@
0x14000B418: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x14000B520: "__cdecl _guard_iat_table" __guard_iat_table
0x14000B2F8: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x140002DD4: memcpy
0x140005EA8: ChangeServiceFailureActionsFlag
0x14000E2D8: "netbinddisable" ??_C@_1BO@FEKDJBFG@?$AAn?$AAe?$AAt?$AAb?$AAi?$AAn?$AAd?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x14000B768: "IGNORES_SHUTDOWN" ??_C@_1CC@HIKIJPH@?$AAI?$AAG?$AAN?$AAO?$AAR?$AAE?$AAS?$AA_?$AAS?$AAH?$AAU?$AAT?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x14000830C: GetServiceConfig
0x14000F4B8: "networkoff" ??_C@_1BG@MIHAIGAH@?$AAn?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAo?$AAf?$AAf?$AA?$AA@
0x1400125F8: "__cdecl _hmod__api_ms_win_service_core_l1_1_2_dll" __hmod__api_ms_win_service_core_l1_1_2_dll
0x14000B468: "__cdecl _imp_memset" __imp_memset
0x14000264F: "__cdecl initterm" _initterm
0x14000B1F0: "__cdecl _imp_UuidEqual" __imp_UuidEqual
0x14000E320: "privs" ??_C@_1M@DJIJLHPP@?$AAp?$AAr?$AAi?$AAv?$AAs?$AA?$AA@
0x140010708: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140012638: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000B368: "__cdecl _imp_Sleep" __imp_Sleep
0x14000B4E0: "__cdecl _xi_z" __xi_z
0x14000E8F0: "obj=" ??_C@_19FHJGDPC@?$AAo?$AAb?$AAj?$AA?$DN?$AA?$AA@
0x14000B260: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000B838: "STOP_PENDING " ??_C@_1BM@NFCFBAPJ@?$AAS?$AAT?$AAO?$AAP?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x14000F220: "DRIVER" ??_C@_1O@GJGGLAJM@?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?$AA@
0x14000265B: "__cdecl _C_specific_handler" __C_specific_handler
0x14000E0D0: "own" ??_C@_17FOMICPMI@?$AAo?$AAw?$AAn?$AA?$AA@
0x14000F374: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x140002DE0: memmove
0x14000E060: "all" ??_C@_17IIFKAHCJ@?$AAa?$AAl?$AAl?$AA?$AA@
0x140009984: LockServiceDatabase
0x14000B594: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x1400027AE: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x14000B420: "__cdecl _imp__wtol" __imp__wtol
0x140014078: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x14000E818: "error=" ??_C@_1O@FBJHBDBD@?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?$DN?$AA?$AA@
0x140002A6A: "__cdecl _imp_load_ControlService" __imp_load_ControlService
0x140009CD0: SC_MIDL_user_free
0x140014068: "__cdecl _imp_ControlServiceExW" __imp_ControlServiceExW
0x14000E168: "OpenSCManager" ??_C@_1BM@ODFMNEDH@?$AAO?$AAp?$AAe?$AAn?$AAS?$AAC?$AAM?$AAa?$AAn?$AAa?$AAg?$AAe?$AAr?$AA?$AA@
0x140007400: EnumDepend
0x140002CE4: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14000E918: "DisplayName=" ??_C@_1BK@PGCAABEN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$DN?$AA?$AA@
0x14000F368: "4096" ??_C@_19OJFBHKO@?$AA4?$AA0?$AA9?$AA6?$AA?$AA@
0x140006C7C: CreateUsage
0x14000E848: "ignore" ??_C@_1O@NMPCFOPJ@?$AAi?$AAg?$AAn?$AAo?$AAr?$AAe?$AA?$AA@
0x1400100D8: CRYPT32_NULL_THUNK_DATA_DLN
0x14000B360: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x14000B448: "__cdecl _imp__ultow" __imp__ultow
0x14000BA20: "GetConfigInfo: Insufficient buff" ??_C@_1GC@FGHECDPK@?$AAG?$AAe?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAI?$AAn?$AAf?$AAo?$AA?3?$AA?5?$AAI?$AAn?$AAs?$AAu?$AAf?$AAf?$AAi?$AAc?$AAi?$AAe?$AAn?$AAt?$AA?5?$AAb?$AAu?$AAf?$AAf@
0x140006200: ChangeServiceSidType
0x140010668: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x140002473: "__cdecl amsg_exit" _amsg_exit
0x14000F4D0: "domainjoin" ??_C@_1BG@EBJAMAPJ@?$AAd?$AAo?$AAm?$AAa?$AAi?$AAn?$AAj?$AAo?$AAi?$AAn?$AA?$AA@
0x14000B578: "start=" ??_C@_1O@NNKEDMCF@?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$DN?$AA?$AA@
0x140008CD8: MyWriteConsole
0x14000E458: "qfailureflag" ??_C@_1BK@GHDMJECB@?$AAq?$AAf?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAf?$AAl?$AAa?$AAg?$AA?$AA@
0x14000F6E0: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x14000279C: "__cdecl _imp_load_QueryServiceStatusEx" __imp_load_QueryServiceStatusEx
0x14000E3C8: "true" ??_C@_19FKLFLPMF@?$AAt?$AAr?$AAu?$AAe?$AA?$AA@
0x1400125E8: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x14000E0E8: "userservice" ??_C@_1BI@IJNKPBNH@?$AAu?$AAs?$AAe?$AAr?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14000E268: "paramchange" ??_C@_1BI@KPJHFCCC@?$AAp?$AAa?$AAr?$AAa?$AAm?$AAc?$AAh?$AAa?$AAn?$AAg?$AAe?$AA?$AA@
0x1400125E0: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x14000B3A0: "__cdecl _imp_exit" __imp_exit
0x140001710: SendConfigToService
0x1400125D8: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x14000B358: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1400101D0: api-ms-win-service-private-l1-1-2_NULL_THUNK_DATA_DLN
0x14000E188: "EnumServicesStatusEx" ??_C@_1CK@MNDIKJJH@?$AAE?$AAn?$AAu?$AAm?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAE?$AAx?$AA?$AA@
0x14000F430: "custom" ??_C@_1O@GHJLOJIO@?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?$AA@
0x14000E4C0: "qpreferrednode" ??_C@_1BO@BEEJEFKC@?$AAq?$AAp?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAn?$AAo?$AAd?$AAe?$AA?$AA@
0x14000E498: "qsidtype" ??_C@_1BC@KMIJHEH@?$AAq?$AAs?$AAi?$AAd?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x14000EA80: "reboot=" ??_C@_1BA@DMEALDEC@?$AAr?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$DN?$AA?$AA@
0x14000F0B8: "PAUSABLE" ??_C@_1BC@KKABJNLL@?$AAP?$AAA?$AAU?$AAS?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x14000F650: "LocalAlloc for firewall trigger " ??_C@_1EK@GGMOIJIH@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAf?$AAi?$AAr?$AAe?$AAw?$AAa?$AAl?$AAl?$AA?5?$AAt?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AA?5@
0x14000B280: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1400089FC: GetStopReasonCode
0x1400101E8: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLN
0x140014100: "__cdecl _imp_QueryLocalUserServiceName" __imp_QueryLocalUserServiceName
0x14000B440: "__cdecl _imp_isupper" __imp_isupper
0x14000F588: "namedpipe" ??_C@_1BE@ODFJOMKM@?$AAn?$AAa?$AAm?$AAe?$AAd?$AAp?$AAi?$AAp?$AAe?$AA?$AA@
0x14000B300: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140010550: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLB
0x140014120: api-ms-win-service-winsvc-l1-1-0_NULL_THUNK_DATA_DLA
0x140002AF5: "__cdecl _imp_load_SetServiceObjectSecurity" __imp_load_SetServiceObjectSecurity
0x1400094F4: StringCbCopyNW
0x14000F6B0: USER_POLICY_PRESENT_GUID
0x14000B670: "control" ??_C@_1BA@IBGCEPCN@?$AAc?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x140012628: "__cdecl _native_startup_lock" __native_startup_lock
0x140002686: "__cdecl _imp_load_QueryServiceObjectSecurity" __imp_load_QueryServiceObjectSecurity
0x140009C30: UnlockServiceDatabase
0x14000E898: "YES" ??_C@_17FGJJPDOI@?$AAY?$AAE?$AAS?$AA?$AA@
0x14000B1E8: "__cdecl _imp_UuidFromStringW" __imp_UuidFromStringW
0x1400023A0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140006CAC: DoCreateService
0x140002D48: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x140010690: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x14000B458: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x14000B3E0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14000B348: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14000B2D0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140010028: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_2_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_2_dll
0x14000F618: "ULongAdd" ??_C@_1BC@ILGLCMLE@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAA?$AAd?$AAd?$AA?$AA@
0x140014058: "__cdecl _imp_GetServiceDisplayNameW" __imp_GetServiceDisplayNameW
0x14000E718: "sdset" ??_C@_1M@JBEJPBMP@?$AAs?$AAd?$AAs?$AAe?$AAt?$AA?$AA@
0x14000B278: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000B9C0: "__cdecl _sz_api_ms_win_service_private_l1_1_0_dll" __sz_api_ms_win_service_private_l1_1_0_dll
0x140014020: "__cdecl _imp_ConvertSidToStringSidW" __imp_ConvertSidToStringSidW
0x140002CC0: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14000B698: "pause" ??_C@_1M@PLLLDAIA@?$AAp?$AAa?$AAu?$AAs?$AAe?$AA?$AA@
0x14000EFC8: "KERNEL_DRIVER " ??_C@_1BO@GOGFGENO@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA_?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AA?$AA@
0x140007828: FormatAndDisplayMessage
0x140005A00: ChangeServiceDescription
0x14000EFB0: "ADAPTER " ??_C@_1BC@OHEPOMLM@?$AAA?$AAD?$AAA?$AAP?$AAT?$AAE?$AAR?$AA?5?$AA?$AA@
0x14000B460: "__cdecl _imp__commode" __imp__commode
0x14000B3C8: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14000B488: "__cdecl _imp_RtlAdjustPrivilege" __imp_RtlAdjustPrivilege
0x14000E6D8: "EnumDepend" ??_C@_1BG@PNGIFNNI@?$AAE?$AAn?$AAu?$AAm?$AAD?$AAe?$AAp?$AAe?$AAn?$AAd?$AA?$AA@
0x14000E7E0: "disabled" ??_C@_1BC@LGPIFEA@?$AAd?$AAi?$AAs?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x14000E2B8: "netbindenable" ??_C@_1BM@NKCKKIFI@?$AAn?$AAe?$AAt?$AAb?$AAi?$AAn?$AAd?$AAe?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x140012600: "__cdecl _hmod__api_ms_win_service_winsvc_l1_1_0_dll" __hmod__api_ms_win_service_winsvc_l1_1_0_dll
0x14000E3A8: "managedaccount" ??_C@_1BO@DEJGEAEA@?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AAa?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x140010744: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x14000B318: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140012608: "__cdecl _hmod__api_ms_win_service_private_l1_1_2_dll" __hmod__api_ms_win_service_private_l1_1_2_dll
0x14000F258: "SYSTEM_START" ??_C@_1BK@BEJJOPCI@?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAS?$AAT?$AAA?$AAR?$AAT?$AA?$AA@
0x140012610: "__cdecl _hmod__api_ms_win_service_private_l1_1_0_dll" __hmod__api_ms_win_service_private_l1_1_0_dll
0x14000E790: "userown" ??_C@_1BA@KGCNANNI@?$AAu?$AAs?$AAe?$AAr?$AAo?$AAw?$AAn?$AA?$AA@
0x14000E7F8: "delayed-auto" ??_C@_1BK@KEAOGOEB@?$AAd?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AA?9?$AAa?$AAu?$AAt?$AAo?$AA?$AA@
0x14000EEE8: "USER_SHARE_PROCESS TEMPLATE " ??_C@_1DK@NIOLMGEL@?$AAU?$AAS?$AAE?$AAR?$AA_?$AAS?$AAH?$AAA?$AAR?$AAE?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AAT?$AAE?$AAM?$AAP?$AAL?$AAA?$AAT?$AAE?$AA?5?$AA?$AA@
0x140009BF0: SVCCTL_HANDLEA_unbind
0x14000E4E0: "qmanagedaccount" ??_C@_1CA@IOMMCGGN@?$AAq?$AAm?$AAa?$AAn?$AAa?$AAg?$AAe?$AAd?$AAa?$AAc?$AAc?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x14000E3D8: "false" ??_C@_1M@HLGKFCJM@?$AAf?$AAa?$AAl?$AAs?$AAe?$AA?$AA@
0x14000E940: "QueryServiceConfig2 (delayed aut" ??_C@_1FK@OKABGBGD@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA2?$AA?5?$AA?$CI?$AAd?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AA?5?$AAa?$AAu?$AAt@
0x14000B6B8: "queryex" ??_C@_1BA@LGGJJJG@?$AAq?$AAu?$AAe?$AAr?$AAy?$AAe?$AAx?$AA?$AA@
0x14000E580: "ok" ??_C@_15FLLIJDNB@?$AAo?$AAk?$AA?$AA@
0x14000F050: " ERROR " ??_C@_1BA@LNAJBCCO@?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?5?$AA?$AA@
0x140012E48: g_fRetry
0x14000F6E0: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x140002540: "__cdecl ValidateImageBase" _ValidateImageBase
0x140010008: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_core_l1_1_1_dll
0x1400101C0: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLN
0x14000F6A0: NETWORK_MANAGER_LAST_IP_ADDRESS_REMOVAL_GUID
0x1400106E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x14000F550: "userpolicy" ??_C@_1BG@OAGEOGBF@?$AAu?$AAs?$AAe?$AAr?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x140009A04: NotifyBootConfigStatus
0x1400100A8: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x140009010: SetSecurity
0x1400125C8: "__cdecl newmode" _newmode
0x14000B210: "__cdecl _imp_RpcBindingFree" __imp_RpcBindingFree
0x14000E530: "lock" ??_C@_19LMCCMMJG@?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x14000EFA0: "WIN32 " ??_C@_1O@KDPJAABB@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA?5?$AA?$AA@
0x14000B7E8: "RUNNING " ??_C@_1BC@ELJMNPL@?$AAR?$AAU?$AAN?$AAN?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x14000B3D8: "__cdecl _imp__initterm" __imp__initterm
0x14000B3D0: "__cdecl _imp___set_app_type" __imp___set_app_type
0x14000B268: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140010730: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1400028E8: "__cdecl _imp_load_QueryServiceConfigW" __imp_load_QueryServiceConfigW
0x14000EBA8: "EnumDepend: LocalAlloc" ??_C@_1CO@PMDBBIDM@?$AAE?$AAn?$AAu?$AAm?$AAD?$AAe?$AAp?$AAe?$AAn?$AAd?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x1400125D0: "__cdecl _hmod__api_ms_win_service_management_l2_1_0_dll" __hmod__api_ms_win_service_management_l2_1_0_dll
0x140010640: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-console-l1-1-0
0x1400095A4: StringCchPrintfW
0x140012618: "__cdecl _onexitend" __onexitend
0x14000F4A0: "networkon" ??_C@_1BE@EGLCLHCK@?$AAn?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAo?$AAn?$AA?$AA@
0x14000B3E8: "__cdecl _imp__exit" __imp__exit
0x14000E280: "netbindadd" ??_C@_1BG@KGJOKOHL@?$AAn?$AAe?$AAt?$AAb?$AAi?$AAn?$AAd?$AAa?$AAd?$AAd?$AA?$AA@
0x14000B4A0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1400029A9: "__cdecl _imp_load_GetServiceDisplayNameW" __imp_load_GetServiceDisplayNameW
0x14000B990: "__cdecl _sz_api_ms_win_service_private_l1_1_2_dll" __sz_api_ms_win_service_private_l1_1_2_dll
0x14000E7D0: "demand" ??_C@_1O@LFCGLMIJ@?$AAd?$AAe?$AAm?$AAa?$AAn?$AAd?$AA?$AA@
0x14000B308: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x140001090: Worker
0x14000E100: "inactive" ??_C@_1BC@DBHEDMBL@?$AAi?$AAn?$AAa?$AAc?$AAt?$AAi?$AAv?$AAe?$AA?$AA@
0x14000BBD8: "GetConfigInfo" ??_C@_1BM@OOEGOGN@?$AAG?$AAe?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAI?$AAn?$AAf?$AAo?$AA?$AA@
0x140005F54: ChangeServiceManagedAccountType
0x14000EB88: "CreateService" ??_C@_1BM@JEACIKGC@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14000BAD0: "INFINITE" ??_C@_1BC@ENFDGFHD@?$AAI?$AAN?$AAF?$AAI?$AAN?$AAI?$AAT?$AAE?$AA?$AA@
0x1400104B8: CRYPT32_NULL_THUNK_DATA_DLB
0x14000E7A0: "usershare" ??_C@_1BE@LICCJNFI@?$AAu?$AAs?$AAe?$AAr?$AAs?$AAh?$AAa?$AAr?$AAe?$AA?$AA@
0x14000B230: "__cdecl _imp_GetConsoleMode" __imp_GetConsoleMode
0x14000B490: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x14000886C: GetServiceSidValue
0x14000ED78: "SetServiceObjectSecurity" ??_C@_1DC@FFNIBLDN@?$AAS?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x14000B388: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x14000B4C8: "__cdecl _xi_a" __xi_a
0x14000B378: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14000F020: "WIN32_PACKAGED_PROCESS " ??_C@_1DA@IFALEJNA@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA_?$AAP?$AAA?$AAC?$AAK?$AAA?$AAG?$AAE?$AAD?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AA?$AA@
0x14000B250: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x140002480: "__cdecl matherr" _matherr
0x14000967C: Usage
0x140001050: wmain
0x14000F440: "strcustom" ??_C@_1BE@EDJIMIAC@?$AAs?$AAt?$AAr?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?$AA@
0x14000F060: "CONTINUE_PENDING " ??_C@_1CE@NBMJGHDG@?$AAC?$AAO?$AAN?$AAT?$AAI?$AAN?$AAU?$AAE?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x14000B398: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x14000E670: "GetServiceKeyName: LocalAlloc" ??_C@_1DM@HACGPFOD@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAK?$AAe?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x14000E540: "delete" ??_C@_1O@MEFPJPNF@?$AAd?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x1400140B0: "__cdecl _imp_SetServiceObjectSecurity" __imp_SetServiceObjectSecurity
0x14000E728: "quserservice" ??_C@_1BK@IDLHKPLI@?$AAq?$AAu?$AAs?$AAe?$AAr?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140014090: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x14000EFE8: "FILE_SYSTEM_DRIVER " ??_C@_1CI@PAFINEAE@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?5?$AA?$AA@
0x14000EE28: "LockServiceDatabase" ??_C@_1CI@KAMBFOHP@?$AAL?$AAo?$AAc?$AAk?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x1400105A8: api-ms-win-service-private-l1-1-2_NULL_THUNK_DATA_DLB
0x14000B710: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1400106CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140002258: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x14000B430: "__cdecl _imp__getche" __imp__getche
0x140002692: "__cdecl _tailMerge_api_ms_win_service_management_l2_1_0_dll" __tailMerge_api_ms_win_service_management_l2_1_0_dll
0x14000B218: "__cdecl _imp_I_RpcExceptionFilter" __imp_I_RpcExceptionFilter
0x14000E5C0: "GetDisplayName" ??_C@_1BO@NNOCHLOE@?$AAG?$AAe?$AAt?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x140002C1C: "__cdecl _tailMerge_api_ms_win_service_private_l1_1_0_dll" __tailMerge_api_ms_win_service_private_l1_1_0_dll
0x1400082B4: GetPromptCharacter
0x140002BA3: "__cdecl _tailMerge_api_ms_win_service_private_l1_1_2_dll" __tailMerge_api_ms_win_service_private_l1_1_2_dll
0x14000B228: "__cdecl _imp_WriteConsoleW" __imp_WriteConsoleW
0x140002A76: "__cdecl _tailMerge_api_ms_win_service_winsvc_l1_1_0_dll" __tailMerge_api_ms_win_service_winsvc_l1_1_0_dll
0x14000E858: "critical" ??_C@_1BC@JGGGFLO@?$AAc?$AAr?$AAi?$AAt?$AAi?$AAc?$AAa?$AAl?$AA?$AA@
0x14000B860: "__cdecl _sz_api_ms_win_service_management_l2_1_0_dll" __sz_api_ms_win_service_management_l2_1_0_dll
0x14000B8D0: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x14000F140: "QueryServiceConfig" ??_C@_1CG@LFCABLJD@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x14001067C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x14000E500: "querylock" ??_C@_1BE@CGLADGKA@?$AAq?$AAu?$AAe?$AAr?$AAy?$AAl?$AAo?$AAc?$AAk?$AA?$AA@
0x1400028FA: "__cdecl _imp_load_ConvertSidToStringSidW" __imp_load_ConvertSidToStringSidW
0x14000B9E8: "GetConfigInfo: LocalAlloc" ??_C@_1DE@GGALLFMK@?$AAG?$AAe?$AAt?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAI?$AAn?$AAf?$AAo?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x140002080: "__cdecl _security_check_cookie" __security_check_cookie
0x14000E900: "password=" ??_C@_1BE@FILOBMNF@?$AAp?$AAa?$AAs?$AAs?$AAw?$AAo?$AAr?$AAd?$AA?$DN?$AA?$AA@
0x14000B4C0: "__cdecl _xc_z" __xc_z
0x14001062C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x14000B320: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x14000BAB0: "FALSE" ??_C@_1M@HCOOECOK@?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$AA@
0x1400059D0: ChangeFailureUsage
0x14000B5E8: "ri=" ??_C@_17FJBCMIJF@?$AAr?$AAi?$AA?$DN?$AA?$AA@
0x14000BC08: NETWORK_MANAGER_FIRST_IP_ADDRESS_ARRIVAL_GUID
0x14000E348: "triggerinfo" ??_C@_1BI@NHLOCAJG@?$AAt?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x14000B548: "auto" ??_C@_19DFBGMPLB@?$AAa?$AAu?$AAt?$AAo?$AA?$AA@
0x14000F3F0: "ConvertSidToStringSid" ??_C@_1CM@LGNDFKIP@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAi?$AAd?$AAT?$AAo?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAi?$AAd?$AA?$AA@
0x14000FFE8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x14000B410: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140012E40: g_hStdOut
0x1400140A8: "__cdecl _imp_QueryServiceConfig2W" __imp_QueryServiceConfig2W
0x14000F530: "machinepolicy" ??_C@_1BM@LPNBNMIA@?$AAm?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AAp?$AAo?$AAl?$AAi?$AAc?$AAy?$AA?$AA@
0x14000E5B8: "bad" ??_C@_17HPPPDLPL@?$AAb?$AAa?$AAd?$AA?$AA@
0x14000B380: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x14000EC60: "ConvertSecurityDescriptorToStrin" ??_C@_1GI@BILPBONK@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AAT?$AAo?$AAS?$AAt?$AAr?$AAi?$AAn@
0x14000E410: "qdescription" ??_C@_1BK@MPHLHAAO@?$AAq?$AAd?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14000CEB0: "struct _svcctl_MIDL_TYPE_FORMAT_STRING const svcctl__MIDL_TypeFormatString" ?svcctl__MIDL_TypeFormatString@@3U_svcctl_MIDL_TYPE_FORMAT_STRING@@B
0x14000EC08: "SCMANAGER" ??_C@_1BE@JENHLCNP@?$AAS?$AAC?$AAM?$AAA?$AAN?$AAA?$AAG?$AAE?$AAR?$AA?$AA@
0x14000B800: "STOPPED " ??_C@_1BC@DNOAPBMF@?$AAS?$AAT?$AAO?$AAP?$AAP?$AAE?$AAD?$AA?5?$AA?$AA@
0x14000F190: "WIN32_SHARE_PROCESS" ??_C@_1CI@PHCNHBBC@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA_?$AAS?$AAH?$AAA?$AAR?$AAE?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?$AA@
0x14000B2F0: "__cdecl _imp_GetStdHandle" __imp_GetStdHandle
0x14000B2B8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x14000B240: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x14000BBB8: "0x%016llx [%d]" ??_C@_1BO@FGHBJBLC@?$AA0?$AAx?$AA?$CF?$AA0?$AA1?$AA6?$AAl?$AAl?$AAx?$AA?5?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?$AA@
0x1400140F8: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLA
0x14000290C: "__cdecl _imp_load_EnumServicesStatusExW" __imp_load_EnumServicesStatusExW
0x140006000: ChangeServicePreferredNode
0x14000ECD0: "ConvertStringSecurityDescriptorT" ??_C@_1GI@BKPKPFDB@?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AAT@
0x14000EA28: "ChangeServiceConfig2" ??_C@_1CK@GJNDHGJ@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA2?$AA?$AA@
0x140002B4F: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x14000BA88: "QueryServiceConfig2" ??_C@_1CI@IKCLJFDP@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA2?$AA?$AA@
0x14000EB08: "restart" ??_C@_1BA@FBHMIOFG@?$AAr?$AAe?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x14000E210: "StartService: OpenService" ??_C@_1DE@EINEKBOA@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14000F340: "GetServiceConfig" ??_C@_1CC@NLIOBANI@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x14000BC18: MACHINE_POLICY_PRESENT_GUID
0x14000B350: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140014008: "__cdecl _imp_CryptBinaryToStringW" __imp_CryptBinaryToStringW
0x140014000: "__cdecl _imp_CryptStringToBinaryW" __imp_CryptStringToBinaryW
0x14000B478: "__cdecl _imp_RtlCreateServiceSid" __imp_RtlCreateServiceSid
0x1400140C8: "__cdecl _imp_QueryServiceStatusEx" __imp_QueryServiceStatusEx
0x1400106B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14000B330: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x14000B4E8: "__cdecl _guard_fids_table" __guard_fids_table
0x140002B2B: "__cdecl _imp_load_ChangeServiceConfig2W" __imp_load_ChangeServiceConfig2W
0x14000B470: msvcrt_NULL_THUNK_DATA
0x140002A46: "__cdecl _imp_load_ControlServiceExW" __imp_load_ControlServiceExW
0x14000FF88: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll
0x14000B0B0: "__cdecl load_config_used" _load_config_used
0x14000FFC8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x14000EBD8: "EnumDependentServices" ??_C@_1CM@HCGOHJKN@?$AAE?$AAn?$AAu?$AAm?$AAD?$AAe?$AAp?$AAe?$AAn?$AAd?$AAe?$AAn?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
0x14000EAC0: "ChangeServiceFailure: LocalAlloc" ??_C@_1EC@JICPOKC@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc@
0x14000B258: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x14000B248: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x1400140B8: "__cdecl _imp_ChangeServiceConfigW" __imp_ChangeServiceConfigW
0x14000F6D0: FIREWALL_PORT_CLOSE_GUID
0x14000E3E8: "preferrednode" ??_C@_1BM@CBKIFNLJ@?$AAp?$AAr?$AAe?$AAf?$AAe?$AAr?$AAr?$AAe?$AAd?$AAn?$AAo?$AAd?$AAe?$AA?$AA@
0x140010048: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_winsvc_l1_1_0_dll
0x1400105B0: api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLB
0x140009BE0: SVCCTL_HANDLEA_bind
0x14000E370: "unrestricted" ??_C@_1BK@GPPBMMOJ@?$AAu?$AAn?$AAr?$AAe?$AAs?$AAt?$AAr?$AAi?$AAc?$AAt?$AAe?$AAd?$AA?$AA@
0x14000E8A0: "depend=" ??_C@_1BA@LBILAFJH@?$AAd?$AAe?$AAp?$AAe?$AAn?$AAd?$AA?$DN?$AA?$AA@
0x1400105F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x14000F500: "portopen" ??_C@_1BC@MFBGFDJA@?$AAp?$AAo?$AAr?$AAt?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x14000F230: "ERROR" ??_C@_1M@BJACCECO@?$AAE?$AAR?$AAR?$AAO?$AAR?$AA?$AA@
0x14000EE80: "WIN32_SHARE_PROCESS " ??_C@_1CK@PPMEGJGK@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA_?$AAS?$AAH?$AAA?$AAR?$AAE?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AA?$AA@
0x14000F088: "PAUSE_PENDING " ??_C@_1BO@OEELHOMO@?$AAP?$AAA?$AAU?$AAS?$AAE?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x14000B3A8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x14000EB28: "run" ??_C@_17PELOKKDJ@?$AAr?$AAu?$AAn?$AA?$AA@
0x140002A34: "__cdecl _imp_load_EnumDependentServicesW" __imp_load_EnumDependentServicesW
0x14000BAC0: "TRUE" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x1400140F0: "__cdecl _imp_I_ScRpcBindA" __imp_I_ScRpcBindA
0x140014010: CRYPT32_NULL_THUNK_DATA_DLA
0x14000F0D0: "RUNS_IN_SYSTEM_PROCESS" ??_C@_1CO@JKBCIBFP@?$AAR?$AAU?$AAN?$AAS?$AA_?$AAI?$AAN?$AA_?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?$AA@
0x14000B5D8: "type=" ??_C@_1M@FPBCACEM@?$AAt?$AAy?$AAp?$AAe?$AA?$DN?$AA?$AA@
0x14000B340: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000B328: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400125C4: "__cdecl dowildcard" _dowildcard
0x140008AD4: GetUserServiceName
0x14000BB60: "CryptBinaryToString: LocalAlloc" ??_C@_1EA@JLOLLEFF@?$AAC?$AAr?$AAy?$AAp?$AAt?$AAB?$AAi?$AAn?$AAa?$AAr?$AAy?$AAT?$AAo?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x14000B558: "system" ??_C@_1O@KFLILLAF@?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x14000271D: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x14000BC28: DOMAIN_JOIN_GUID
0x14000F290: "AUTO_START (DELAYED)" ??_C@_1CM@FPOJLMD@?$AAA?$AAU?$AAT?$AAO?$AA_?$AAS?$AAT?$AAA?$AAR?$AAT?$AA?5?$AA?5?$AA?$CI?$AAD?$AAE?$AAL?$AAA?$AAY?$AAE?$AAD?$AA?$CJ?$AA?$AA@
0x14000B200: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x14000B338: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140014118: "__cdecl _imp_ControlService" __imp_ControlService
0x14000F6E8: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x14000FFA8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x1400027BA: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x14000B7B0: "STOPPABLE" ??_C@_1BE@GAEPBCLC@?$AAS?$AAT?$AAO?$AAP?$AAP?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x140014108: api-ms-win-service-private-l1-1-2_NULL_THUNK_DATA_DLA
0x140002670: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000B2E8: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x1400023CC: RtlpImageNtHeader
0x140002845: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x14000BBA0: "0x%02x [%d]" ??_C@_1BI@CAKKJAFE@?$AA0?$AAx?$AA?$CF?$AA0?$AA2?$AAx?$AA?5?$AA?$FL?$AA?$CF?$AAd?$AA?$FN?$AA?$AA@
0x14000E360: "sidtype" ??_C@_1BA@KHFCDBPG@?$AAs?$AAi?$AAd?$AAt?$AAy?$AAp?$AAe?$AA?$AA@
0x14000B5C8: "state=" ??_C@_1O@NDEBOEJM@?$AAs?$AAt?$AAa?$AAt?$AAe?$AA?$DN?$AA?$AA@
0x14000B900: "__cdecl _sz_api_ms_win_service_core_l1_1_1_dll" __sz_api_ms_win_service_core_l1_1_1_dll
0x140014028: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x14000E2F8: "description" ??_C@_1BI@MFBGCOGB@?$AAd?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14000E570: "create" ??_C@_1O@KBENBEFG@?$AAc?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?$AA@
0x14000B2C8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000E6B0: "GetServiceKeyName" ??_C@_1CE@KPPOLJJM@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAK?$AAe?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14000F318: "CRITICAL" ??_C@_1BC@IHPPMOFN@?$AAC?$AAR?$AAI?$AAT?$AAI?$AAC?$AAA?$AAL?$AA?$AA@
0x14000B930: "__cdecl _sz_api_ms_win_service_core_l1_1_2_dll" __sz_api_ms_win_service_core_l1_1_2_dll
0x14000E748: "ControlServiceEx" ??_C@_1CC@OCCLEEFF@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAE?$AAx?$AA?$AA@
0x14000A320: "unsigned long __cdecl ScMapRpcError(unsigned long,unsigned long)" ?ScMapRpcError@@YAKKK@Z
0x140012E50: svcctl_handle
0x14000F378: "LocalAlloc" ??_C@_1BG@CAMFAADD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$AA@
0x1400029B5: "__cdecl _tailMerge_api_ms_win_service_core_l1_1_2_dll" __tailMerge_api_ms_win_service_core_l1_1_2_dll
0x14000B7C8: "NOT_STOPPABLE" ??_C@_1BM@EMCEAEJI@?$AAN?$AAO?$AAT?$AA_?$AAS?$AAT?$AAO?$AAP?$AAP?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x14000B3C0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x14000B2D8: "__cdecl _imp_SetThreadUILanguage" __imp_SetThreadUILanguage
0x14000B498: ntdll_NULL_THUNK_DATA
0x14000B408: "__cdecl _imp_memcpy" __imp_memcpy
0x14000E658: "GetKeyName" ??_C@_1BG@NPJHDLDB@?$AAG?$AAe?$AAt?$AAK?$AAe?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14000EA58: "reset=" ??_C@_1O@ICDDBFCH@?$AAr?$AAe?$AAs?$AAe?$AAt?$AA?$DN?$AA?$AA@
0x14000F1F8: "FILE_SYSTEM_DRIVER" ??_C@_1CG@LKHBJBNG@?$AAF?$AAI?$AAL?$AAE?$AA_?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA_?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?$AA@
0x14000E248: "StartService" ??_C@_1BK@HGLHIMO@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x140009CE0: "int __cdecl ScConvertOffsets64(enum SC_API_NUMBER,struct SC_HANDLE__ * __ptr64,unsigned long,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long * __ptr64)" ?ScConvertOffsets64@@YAHW4SC_API_NUMBER@@PEAUSC_HANDLE__@@KKPEAEKPEAK33PEAX3@Z
0x14000E9A0: "ChangeServiceConfig2 (delayed au" ??_C@_1FM@FAIKEPFG@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA2?$AA?5?$AA?$CI?$AAd?$AAe?$AAl?$AAa?$AAy?$AAe?$AAd?$AA?5?$AAa?$AAu@
0x14000E404: "qc" ??_C@_15KHNANINF@?$AAq?$AAc?$AA?$AA@
0x14000E1E0: "QueryServiceStatusEx" ??_C@_1CK@IBJMKCMP@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AAE?$AAx?$AA?$AA@
0x14000EB18: "reboot" ??_C@_1O@FEJCAGNG@?$AAr?$AAe?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x140009C20: SVCCTL_HANDLEW_bind
0x14000E478: "qtriggerinfo" ??_C@_1BK@NNNDHOPJ@?$AAq?$AAt?$AAr?$AAi?$AAg?$AAg?$AAe?$AAr?$AAi?$AAn?$AAf?$AAo?$AA?$AA@
0x140014018: "__cdecl _imp_ConvertSecurityDescriptorToStringSecurityDescriptorW" __imp_ConvertSecurityDescriptorToStringSecurityDescriptorW
0x14000E040: "driver" ??_C@_1O@KNIGNIDC@?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
0x140012008: "__cdecl _security_cookie" __security_cookie
0x14000E330: "failureflag" ??_C@_1BI@GNFBMKEO@?$AAf?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AAf?$AAl?$AAa?$AAg?$AA?$AA@
0x1400140E8: "__cdecl _imp_I_ScRpcBindW" __imp_I_ScRpcBindW
0x14000BC58: CUSTOM_SYSTEM_STATE_CHANGE_EVENT_GUID
0x14000B2B0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14000B5B8: "group=" ??_C@_1O@MCBKFBAO@?$AAg?$AAr?$AAo?$AAu?$AAp?$AA?$DN?$AA?$AA@
0x140012000: "__cdecl _defaultmatherr" __defaultmatherr
0x140002839: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x14000E430: "qfailure" ??_C@_1BC@BFFOBOEP@?$AAq?$AAf?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?$AA@
0x140010654: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x14000F420: "device" ??_C@_1O@LNKPKJJI@?$AAd?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x14000B6E8: "WIN32_OWN_PROCESS " ??_C@_1CG@OIGFFLIO@?$AAW?$AAI?$AAN?$AA3?$AA2?$AA_?$AAO?$AAW?$AAN?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AA?$AA@
0x14000E0A0: "kernel" ??_C@_1O@EDEEBIJK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AA?$AA@
0x14000E828: "normal" ??_C@_1O@DIMONLGD@?$AAn?$AAo?$AAr?$AAm?$AAa?$AAl?$AA?$AA@
0x140012620: "__cdecl _onexitbegin" __onexitbegin
0x140014080: "__cdecl _imp_DeleteService" __imp_DeleteService
0x140006C4C: ConfigUsage
0x14000ED38: "GetSecurityDescriptorControl" ??_C@_1DK@GPJADFHN@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x14000B658: "continue" ??_C@_1BC@PNIMKJGP@?$AAc?$AAo?$AAn?$AAt?$AAi?$AAn?$AAu?$AAe?$AA?$AA@
0x14000E888: "tag=" ??_C@_19OICGANNA@?$AAt?$AAa?$AAg?$AA?$DN?$AA?$AA@
0x14000B3B0: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000F3C8: "RtlCreateServiceSid" ??_C@_1CI@JFDJOAIO@?$AAR?$AAt?$AAl?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAS?$AAi?$AAd?$AA?$AA@
0x1400096D8: EnumServiceGroupW
0x14000EE50: "UnlockServiceDatabase" ??_C@_1CM@CMNHDLFN@?$AAU?$AAn?$AAl?$AAo?$AAc?$AAk?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x14000F240: "BOOT_START" ??_C@_1BG@MAKOAGFL@?$AAB?$AAO?$AAO?$AAT?$AA_?$AAS?$AAT?$AAA?$AAR?$AAT?$AA?$AA@
0x14000B270: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000B960: "__cdecl _sz_api_ms_win_service_winsvc_l1_1_0_dll" __sz_api_ms_win_service_winsvc_l1_1_0_dll
0x1400100F8: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x14000BC38: RPC_INTERFACE_EVENT_GUID
0x14000B718: "ACCEPTS_PRESHUTDOWN" ??_C@_1CI@IDFDBICM@?$AAA?$AAC?$AAC?$AAE?$AAP?$AAT?$AAS?$AA_?$AAP?$AAR?$AAE?$AAS?$AAH?$AAU?$AAT?$AAD?$AAO?$AAW?$AAN?$AA?$AA@
0x14000B238: api-ms-win-core-console-l1-1-0_NULL_THUNK_DATA
0x140002574: "__cdecl _security_init_cookie" __security_init_cookie
0x14000B3B8: "__cdecl _imp__cexit" __imp__cexit
0x140010110: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA_DLN
0x140010510: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA_DLB
0x140002428: "__cdecl get_image_app_type" _get_image_app_type
0x140014048: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA_DLA
0x14000F630: "ULongMult" ??_C@_1BE@BAFCOIKJ@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAM?$AAu?$AAl?$AAt?$AA?$AA@
0x14000E448: "qprivs" ??_C@_1O@OEIHFKGE@?$AAq?$AAp?$AAr?$AAi?$AAv?$AAs?$AA?$AA@
0x1400105C8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000B1B8: "struct _GENERIC_BINDING_ROUTINE_PAIR const * const BindingRoutines" ?BindingRoutines@@3QBU_GENERIC_BINDING_ROUTINE_PAIR@@B
0x14000B3F8: "__cdecl _imp_memmove" __imp_memmove
0x14000F1D8: "KERNEL_DRIVER" ??_C@_1BM@CMDFIBKK@?$AAK?$AAE?$AAR?$AAN?$AAE?$AAL?$AA_?$AAD?$AAR?$AAI?$AAV?$AAE?$AAR?$AA?$AA@
0x140002A58: "__cdecl _imp_load_GetServiceKeyNameW" __imp_load_GetServiceKeyNameW
0x140002050: wmainCRTStartup
0x140012640: MessageBuffer
0x14000B1F8: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x14000B208: "__cdecl _imp_NdrClientCall2" __imp_NdrClientCall2
0x140010128: api-ms-win-service-core-l1-1-2_NULL_THUNK_DATA_DLN
0x14000B010: "struct _MIDL_STUB_DESC const svcctl_StubDesc" ?svcctl_StubDesc@@3U_MIDL_STUB_DESC@@B
0x14000CE78: "struct _svcctl_MIDL_EXPR_FORMAT_STRING const svcctl__MIDL_ExprFormatString" ?svcctl__MIDL_ExprFormatString@@3U_svcctl_MIDL_EXPR_FORMAT_STRING@@B
0x140014060: api-ms-win-service-core-l1-1-2_NULL_THUNK_DATA_DLA
0x140010528: api-ms-win-service-core-l1-1-2_NULL_THUNK_DATA_DLB
0x14000EB30: "ChangeServiceFailure: RtlAdjustP" ??_C@_1FC@OGOIMFBB@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAF?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?3?$AA?5?$AAR?$AAt?$AAl?$AAA?$AAd?$AAj?$AAu?$AAs?$AAt?$AAP@
0x14000B290: "__cdecl _imp_WriteFile" __imp_WriteFile
0x1400105DC: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x14000E518: "qprotection" ??_C@_1BI@MLFMJCCM@?$AAq?$AAp?$AAr?$AAo?$AAt?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x14000B588: "query" ??_C@_1M@ODHDFHNE@?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?$AA@
0x14000E870: "binPath=" ??_C@_1BC@BFCFMNPC@?$AAb?$AAi?$AAn?$AAP?$AAa?$AAt?$AAh?$AA?$DN?$AA?$AA@
0x14000B5A0: "bufsize=" ??_C@_1BC@LCBFHGIC@?$AAb?$AAu?$AAf?$AAs?$AAi?$AAz?$AAe?$AA?$DN?$AA?$AA@
0x14000B890: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x14000B220: RPCRT4_NULL_THUNK_DATA
0x14000F518: "portclose" ??_C@_1BE@JJMLGJBJ@?$AAp?$AAo?$AAr?$AAt?$AAc?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x1400020E0: "__cdecl _report_gsfailure" __report_gsfailure
0x14000E120: "EnumQueryServicesStatus: LocalAl" ??_C@_1EI@DNNFENLF@?$AAE?$AAn?$AAu?$AAm?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl@
0x14000E298: "netbindremove" ??_C@_1BM@ILLDEOFI@?$AAn?$AAe?$AAt?$AAb?$AAi?$AAn?$AAd?$AAr?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x140005860: APIFailed
0x140002B73: "__cdecl _imp_load_CreateServiceW" __imp_load_CreateServiceW
0x14000E310: "failure" ??_C@_1BA@LIMELIPO@?$AAf?$AAa?$AAi?$AAl?$AAu?$AAr?$AAe?$AA?$AA@
0x1400140C0: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x140012630: "__cdecl _native_startup_state" __native_startup_state
0x14000B818: "START_PENDING " ??_C@_1BO@DOLAFGP@?$AAS?$AAT?$AAA?$AAR?$AAT?$AA_?$AAP?$AAE?$AAN?$AAD?$AAI?$AAN?$AAG?$AA?5?$AA?$AA@
0x14000F2F8: "NORMAL" ??_C@_1O@PMCOLDMN@?$AAN?$AAO?$AAR?$AAM?$AAA?$AAL?$AA?$AA@
0x14000B790: "NOT_PAUSABLE" ??_C@_1BK@JPKLALAC@?$AAN?$AAO?$AAT?$AA_?$AAP?$AAA?$AAU?$AAS?$AAA?$AAB?$AAL?$AAE?$AA?$AA@
0x14000F1C8: "ADAPTER" ??_C@_1BA@DGGIHHDG@?$AAA?$AAD?$AAA?$AAP?$AAT?$AAE?$AAR?$AA?$AA@
0x14000EDB0: "GetServiceLockStatus: LocalAlloc" ??_C@_1EC@HGGFOHIF@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAL?$AAo?$AAc?$AAk?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc@
0x14000756C: FixupArgs
0x14000E5E0: "GetServiceDisplayName: LocalAllo" ??_C@_1EE@NMKDDFK@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo@
0x14000E4B0: "showsid" ??_C@_1BA@KNFNOHHD@?$AAs?$AAh?$AAo?$AAw?$AAs?$AAi?$AAd?$AA?$AA@
0x14000F390: "QueryLocalUserServiceName" ??_C@_1DE@HMCJGGKA@?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAL?$AAo?$AAc?$AAa?$AAl?$AAU?$AAs?$AAe?$AAr?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14000F2E0: "DISABLED" ??_C@_1BC@IFPGCOKD@?$AAD?$AAI?$AAS?$AAA?$AAB?$AAL?$AAE?$AAD?$AA?$AA@
0x140014098: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x14000EA00: "ChangeServiceConfig" ??_C@_1CI@NLFMIDML@?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AA?$AA@
0x14000B8A0: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x14000B3F0: "__cdecl _imp__fmode" __imp__fmode
0x140002B3D: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x14000F308: "SEVERE" ??_C@_1O@OFBFJDOL@?$AAS?$AAE?$AAV?$AAE?$AAR?$AAE?$AA?$AA@
0x14000E0B0: "filesys" ??_C@_1BA@DGPBALBF@?$AAf?$AAi?$AAl?$AAe?$AAs?$AAy?$AAs?$AA?$AA@
0x140002C9B: "__cdecl _imp_load_I_ScRpcBindW" __imp_load_I_ScRpcBindW
0x14000F488: "kwallcustom" ??_C@_1BI@OGDFCKHL@?$AAk?$AAw?$AAa?$AAl?$AAl?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?$AA@
0x140002918: "__cdecl _tailMerge_api_ms_win_service_core_l1_1_1_dll" __tailMerge_api_ms_win_service_core_l1_1_1_dll
0x14000B450: "__cdecl _imp__tolower" __imp__tolower
0x140002CAD: "__cdecl _imp_load_I_ScRpcBindA" __imp_load_I_ScRpcBindA
0x14000B5F0: "EnumQueryServicesStatus:OpenServ" ??_C@_1EI@PHGCLLDC@?$AAE?$AAn?$AAu?$AAm?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?3?$AAO?$AAp?$AAe?$AAn?$AAS?$AAe?$AAr?$AAv@
0x14000B568: "boot" ??_C@_19NNFDHLJH@?$AAb?$AAo?$AAo?$AAt?$AA?$AA@
0x14000F330: "IGNORE" ??_C@_1O@BIBCDGFH@?$AAI?$AAG?$AAN?$AAO?$AAR?$AAE?$AA?$AA@
0x1400106F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1400140D0: "__cdecl _imp_ChangeServiceConfig2W" __imp_ChangeServiceConfig2W
0x14000E0D8: "share" ??_C@_1M@EDJNCFMO@?$AAs?$AAh?$AAa?$AAr?$AAe?$AA?$AA@
0x1400028D6: "__cdecl _imp_load_ChangeServiceConfigW" __imp_load_ChangeServiceConfigW
0x1400062AC: ChangeServiceTriggerParams
0x14000E628: "GetServiceDisplayName" ??_C@_1CM@CFAKMMDP@?$AAG?$AAe?$AAt?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
0x14000B6A8: "start" ??_C@_1M@JGKKHEFC@?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
0x14000EEB0: "USER_OWN_PROCESS TEMPLATE " ??_C@_1DG@NOPKAPKF@?$AAU?$AAS?$AAE?$AAR?$AA_?$AAO?$AAW?$AAN?$AA_?$AAP?$AAR?$AAO?$AAC?$AAE?$AAS?$AAS?$AA?5?$AAT?$AAE?$AAM?$AAP?$AAL?$AAA?$AAT?$AAE?$AA?5?$AA?$AA@
0x1400024E0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000B370: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x14000E1B8: "EnumServicesStatus" ??_C@_1CG@LJJJINDF@?$AAE?$AAn?$AAu?$AAm?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AAS?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?$AA@
0x140008B80: HexStringToNumber
0x14000F470: "kwanycustom" ??_C@_1BI@HPJPKCHA@?$AAk?$AAw?$AAa?$AAn?$AAy?$AAc?$AAu?$AAs?$AAt?$AAo?$AAm?$AA?$AA@
0x140010618: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1400106A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x140002DEC: memset
0x140010758: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14000BC70: "struct _svcctl_MIDL_PROC_FORMAT_STRING const svcctl__MIDL_ProcFormatString" ?svcctl__MIDL_ProcFormatString@@3U_svcctl_MIDL_PROC_FORMAT_STRING@@B

[JEB Decompiler by PNF Software]