HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/SysWOW64/zh-TW/sc.exe.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!�

�y�@ Ļ8.rdata�@@.rsrc� �@@J?F[
T88J?F[$��8.rdata8x.rdata$zzzdbg �.rsrc$01� �.rsrc$02 3pT�CqrA�?ڬH�*9�{Mo �.)�4J?F[��(�@�X�p��������� ���!���L�x�MUI����ph}���R
N�k�x��
�I�hav��g���MUIzh-TWX#+�A-<�Cdo|Vq��X����������c�:

        SC /fNP(u�O�T
g�R�c6R�{t�T�S
g�R�n��v}T�NRz_0

O(u�e_:

        sc <server> [command] [service name] <option1> <option2>...





        <server> x���v<h_/f "\\ServerName"

        }T�N�v2�Nek��f�S�}1u8�eQ "sc [command]" �S�_

        }T�N:

          query-----------�gb�
g�R�v�rKa�bR	�
g�R^��W�v�rKa0

          queryex---------�gb�
g�R�v�^8O�rKa�bR	�
g�R^��W�v�rKa0

          start-----------_U�R
g�R0

          pause-----------�P� PAUSE �c6R��Bl0R
g�R0

          interrogate-----�P� INTERROGATE �c6R��Bl0R
g�R0

          continue--------�P� CONTINUE �c6R��Bl0R
g�R0

          stop------------�P� STOP ��Bl0R
g�R0

          config----------���f
g�R�v-��[ (͑�e��_j�_�N	gHe)0

          description-----���f
g�R�v�c�0

          failure---------���f
g�R(W1YWeBf@b�c�S�v�R\O0

          failureflag-----���f
g�R�v1YWe�R\O�ej0

          sidtype---------���f
g�R�v
g�R SID ^��W0

          privs-----------���f
g�R�v�_��
kP�0

          managedaccount--���f
g�R�N\
g�R3^6b�[�xj:y�p1u LSA �{t0

          qc--------------�gb�
g�R�v-��[nj
�0

          qdescription----�gb�
g�R�v�c�0

          qfailure--------�gb�
g�R(W1YWeBf@b�c�S�v�R\O0

          qfailureflag----�gb�
g�R�v1YWe�R\O�ej0

          qsidtype--------�gb�
g�R�v
g�R SID ^��W0

          qprivs----------�gb�
g�R�v�_��
kP�0

          qtriggerinfo----�gb�
g�R�v��|vz�^�Sxe0

          qpreferrednode--�gb�
g�R�vca(u NUMA �{ޞ0

          qmanagedaccount-�gb�
g�R/f&TO(u�[�x1u LSA �{t�v3^6b0

          qprotection-----�gb�
g�R�vU�tz�^�Ow�d\}0

          quserservice----�gb�O(u�
g�R�{,g�v,g_j�WL�PԚ0

          delete----------*Rd�
g�R (�_{v�)0

          create----------�^�z
g�R (�e�X0R{v�-N)0

          control---------�P��c6R0R
g�R0

          sdshow----------o�:y
g�R�v�[hQ'`�c�CQ0

          sdset------------��[
g�R�v�[hQ'`�c�CQ0

          showsid---------o�:y
\�a�Na
T1z�v
g�R SID W[2N0

          triggerinfo------��[
g�R�v��|vz�^�Sxe0

          preferrednode----��[
g�R�vca(u NUMA �{ޞ0

          GetDisplayName--�S�_
g�R�v DisplayName0

          GetKeyName------�S�_
g�R�v ServiceKeyName0

          EnumDepend------R	�
g�R�v�O'`0



        NR}T�N
N���
g�R
T1z:

        sc <server> <command> <option>

          boot------------(ok | bad) h�:y/f&T��\
N!k��_j2QX[�p
N!kck�x�v

                          ��_j-��[

          Lock------------���[
g�Rnj�e�^

          QueryLock-------�gb� SCManager nj�e�^�v LockStatus

�{�O:

        sc start MyService

X



QUERY � QUERYEX x��:

        �Y�g query }T�N�_b��cW�
g�R
T1z�\�P�V
g�R�v�rKa0(W�.z�`�lN�!q�l

        c�[vQ�Nx��0� query }T�N�_b��l	g�c�NUOqg��b/f�cW�NRvQ-NNPx�

        ��\gR	�
g�R0

    type=    ��R	�KN
g�R�v^��W (driver, service, userservice, all)

             (�-� = service)

    state=   ��R	�KN
g�R�v�rKa (inactive, all)

             (�-� = active)

    bufsize= R	��}]�@S�v'Y\ (MOCQD})

             (�-� = %1)

    ri=      ���YR	�@b(W�v|~�~"}_�}_�

             (�-� = 0)

    group=   ��R	��v
g�R�D}

             (�-� = all groups)



���l�{�O

sc query                - R	�O(u-N
g�R�E��Rz_�v�rKa

sc query eventlog       - o�:y�N�N���j
g�R�v�rKa

sc queryex eventlog     - o�:y�N�N���j
g�R�v�^8O�rKa

sc query type= driver   - �PR	�O(u-N�vE��Rz_

sc query type= service  - �PR	� Win32 
g�R

sc query state= all     - R	�@b	g
g�R�E��Rz_

sc query bufsize= 50    - )R(u'Y\�p 50 PMOCQD}�v�}]�@S2�L�R	�

sc query ri= 14         - (W|~�~"}_ = 14 �v0W�e���YR	�

sc queryex group= ""    - R	�
N(W�D}-N�vO(u-N
g�R

sc query type= interact - R	�@b	g�N�R_
g�R

sc query type= driver group= NDIS     - R	�@b	g NDIS E��Rz_

�c�:

        �O9e{v��T
g�Rnj�e�^-N�v
g�R��v0

O(u�e_:

        sc <server> config [service name] <option1> <option2>...



x��:

�la: x��
T1zS�bI{_�0

      (WI{_��T<PKN���_�zzN<h0

      傁��yd��v�O'`�ˊO(uNP / ZP�p�v�O'`<P0

 type= <own|share|interact|kernel|filesys|rec|adapt|userown|usershare>

 start= <boot|system|auto|demand|disabled|delayed-auto>

 error= <normal|severe|critical|ignore>

 binPath= <.exe �jHh�v�N2�MO�jHh_
T1z>

 group= <LoadOrderGroup>

 tag= <yes|no>

 depend= <�v�O'`(�N / (�S�e�}) ����)>

 obj= <3^6b
T1z|ir�N
T1z>

 DisplayName= <o�:y
T1z>

 password= <�[�x>

|�c�:

        (W{v��T
g�Rnj�e�^-N�^�z
g�R��v0

O(u�e�l:

        sc <server> create [service name] [binPath= ] <option1> <option2>...



x��:

�la: x��
T1zS�bI{_�0

      (WI{_��T<PKN���_�zzN<h0

 type= <own|share|interact|kernel|filesys|rec|userown|usershare>

       (�-�<P = own)

 start= <boot|system|auto|demand|disabled|delayed-auto>

       (�-�<P = demand)

 error= <normal|severe|critical|ignore>

       (�-�<P = normal)

 binPath= <.exe �jHh�v�N2�MO�jHh_
T1z>

 group= <	�eQ��^�D}>

 tag= <yes|no>

 depend= <�v�O'`(�N / (�S�e�}) ����)>

 obj= <3^6b
T1z|ir�N
T1z>

       (�-�<P = LocalSystem)

 DisplayName= <o�:y
T1z>

 password= <�[�x>

���f:

        ���f1YWeBf�WL��v�R\O

O(u�e�l:

        sc <server> failure [service name] <option1> <option2>...



OPTIONS:

        reset=   <�l	g1YWe|vu�vBf��w��^ (�UMO: �y)

                  (WYENKN�_͑-�1YWe�xe�p 0 (�S��/f INFINITE)>

                  (�_�� actions= #�(u)

        reboot=  <(W�V1YWe͑�e��_jMR�^�d
�o`>

        command= <1YWe|vuBf�WL��v}T�NR>

        actions= <1YWe�R\O�SvQ�^r�Bf�� (�UMO: �k�y)�

                  �N / (�S�e�})���� -- �O�Y�run/5000/reboot/800

                  	gHe�v�R\O	g <run|restart|reboot> >

                  (�_�� reset= x��#�(u)

���f:

        _U�R�WL�-N�v
g�R0

O(u�e�l:

        sc <server> start [service name] <arg1> <arg2> ...

���f:

        �P� PAUSE �c6R��Bl0R
g�R0

O(u�e�l:

        sc <server> pause [service name]

���f:

        �P� INTERROGATE �c6R��Bl0R
g�R0

O(u�e�l:

        sc <server> interrogate [service name]

X��f:

        �P� CONTROL z_�x0R
g�R0

O(u�e�l:

        sc <server> control [service name] <value>

            <value> = O(u��[��v�c6Rz_�x

            <value> = <paramchange|

                       netbindadd|netbindremove|

                       netbindenable|netbinddisable>



ˊTBf�S�� sc stop�sc pause I{0

���f:

        �P� CONTINUE �c6R��Bl0R
g�R0

O(u�e�l:

        sc <server> continue [service name]

��c�:

        �P� STOP �c6R��Bl0R
g�R0

O(u�e_:

        sc <server> stop [service name] <reason> <comment>

        <reason> = 
g�R\Pbk�vt1u�N�x_��x (�Sweu)

                   �[�_�1uwQ	gNRCQ }<h_D}b:



                        Flag:Major reason:Minor reason



                        [�O�Y�1:2:8 h�:y lxԚ: �x�x (
N(W��RKN-N)]



                        �ej                       ;N��t1u

                   ------------------       ---------------------------

                   1    -   \*g��R        1       -   vQ�N

                   2    -   ��            2       -   lxԚ

                   4    -   �]��R            3       -   \Omi�|q}

                                            4       -   ߎԚ

                                            5       -   �a(uz_

                                            64-255  -   ��



                            !k��t1u

                   -----------------------------------

                   1            -   vQ�N 

                   2            -   �}w� 

                   3            -   �[݈ 

                   4            -   GS} 

                   5            -   ͑�e-��[ 

                   6            -   �f\P 

                   7            -   
Niz�[

                   8            -   �x�x

                   9            -   �}�aS

                   10           -   �t�X

                   11           -   lxԚE��Rz_

                   12           -   vQ�NE��Rz_

                   13           -   Service Pack

                   14           -   ߎԚ�f�e

                   15           -   �[hQ'`OUL��Ock

                   16           -   �[hQ'`

                   17           -   �}�#��}

                   18           -   WMI

                   19           -   Service Pack �d��[݈

                   20           -   ߎԚ�f�e�d��[݈

                   22           -   �[hQ'`OUL��Ock�d��[݈

                   23           -   MMC

                   256-65535    -   ��



       <comment> = 
N�t1u�v�Sweu;�� (gY 127 PW[CQ)

���f:

        -��[
g�R�v��fW[2N0

O(u�e_:

        sc <server> description [service name] [description]

���f:

        �gb�
g�R�v-��[nj
�0

O(u�e�l:

        sc <server> qc [service name] <bufferSize>

���f:

        �b�S
g�R�v��fW[2N0

O(u�e�l:

        sc <server> qdescription [service name] <bufferSize>

���f:

        �b�S
g�R1YWeBf�WL��v�R\O0

O(u�e�l:

        sc <server> qfailure [service name] <bufferSize>

���f:

        �gb� SC �{t�Tnj�e�^�v���[�rKa0

O(u�e�l:

        sc <server> querylock <bufferSize>

0��f:

        ꁞ_{v�-N*Rd�
g�R��v0

        �Y�g
g�R�WL�-N�bvQ�N�vz�^	g
\�P

        
g�R��_U�v�c6R�N�x�
g�R�S/f!|�U0Wj:y

        �p�_*Rd�0

O(u�e�l:

        sc <server> delete [service name]

���f:

        h�:y
N!k��_j/f&T��2QX[�p,g_j��f�
N!k

        ck�x��_j-��[0

        �Y�gc�[�N�:O
ghV
T1zsS��euN�0

O(u�e�l:

        sc <server> boot <bad | ok>

���f:

        �S�_�yr�[
g�R�vܕo��vo�:y
T1z

O(u�e�l:

        sc <server> GetDisplayName <service key name> <bufsize>

���f:

        �S�_�yr�[
g�R�vܕo��v_j�x
T1z�

        O(uo�:y
T1zZP�p8�eQ

O(u�e�l:

        sc <server> GetKeyName <service display name> <bufsize>

���f:

        R	��OX[�e�P
g�R�v
g�R

O(u�e�l:

        sc <server> EnumDepend <service name> <bufsize>

���f:

        �N SDDL <h_o�:y
g�R�v�[hQ'`�c�CQ

O(u�e�l:

        sc <server> sdshow <service name> <showrights>

���f:

        -��[
g�R�v�[hQ'`�c�CQ

O(u�e�l:

        sc <server> sdset <service name> <SD in SDDL format>

8


g�R
T1z: %1

��f    : %2


T1z = %1



%1

D        IsLocked      : TRUE

D        IsLocked      : FALSE

�        LockOwner     : %1

        LockDuration  : %2 (�y��_�S�_�{w�)



$[SC] j� = %1

0[SC] %1: ���S�v��v = %2



T

O(u-N�vnj�e�^�]�����[0

傁��}1u API �O�d����[�ˊ	c u:

0

[SC] \gP}_g�N�d����[nj�e�^

h

SERVICE_NAME: %1 %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

                                (%8, %9, %10)

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

�

SERVICE_NAME: %1

DISPLAY_NAME: %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

                                (%8, %9, %10)

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

�

SERVICE_NAME: %1 %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

                                (%8, %9, %10)

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

        PID                : %17

        FLAGS              : %18



SERVICE_NAME: %1

DISPLAY_NAME: %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

                                (%8, %9, %10)

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

        PID                : %17

        FLAGS              : %18

,

SERVICE_NAME: %1

        RESET_PERIOD (�UMO: �y)      : %2

        REBOOT_MESSAGE               : %3

        COMMAND_LINE                 : %4

�        FAILURE_ACTIONS              : RESTART -- �^r� = %1 �k�y0

�                                       RESTART -- �^r� = %1 �k�y0

�        FAILURE_ACTIONS              : REBOOT -- �^r� = %1 �k�y0

�                                       REBOOT -- �^r� = %1 �k�y0

�        FAILURE_ACTIONS              : RUN PROCESS -- �^r� = %1 �k�y0

�                                       RUN PROCESS -- �^r� = %1 �k�y0

h

SERVICE_NAME: %1

        TYPE               : %2  %3 %4

        START_TYPE         : %5   %6

        ERROR_CONTROL      : %7   %8

        BINARY_PATH_NAME   : %9

        LOAD_ORDER_GROUP   : %10

        TAG                : %11

        DISPLAY_NAME       : %12

        DEPENDENCIES       : %13

H                           : %1

H        SERVICE_START_NAME : %1

 [SC] %1 b�R

4[SC] %1 !q�l %2:



%3

,[SC] %1 ��� %2 MOCQD}

P

[SC] %1: �fYnj�e���� %2 MOCQD}_U�R|~�~�e"}_ %3

<

[SC] %1: �fYnj�e���� %2 MOCQD}

0

/���: 
Nck�x�v %1 kMO



(

/���: 
Nck�x�vx��



8

/���:  R	��D}Bf!q�lc�[
g�R
T1z



(

/���:  ��Bl
g�R
T1z



,

/���:  !q�l��X��v}T�N



8

/���:  ͑-��T�WL�x���_�TBf-��[



u

��c�:

        ���f
g�R�v1YWe�R\O�ej-��[0�Y�g�P-��[/f 0 (�-�)�GR�S	gvu
g�RU�

        tz�^B}bk
g�R�v�NvQ�rKa
N/f SERVICE_STOPPED Bf�
g�R�c6R�{t�T

        (SCM) Mbg_U(u
g�R�v-��[1YWe�R\O0�Y�g�P-��[/f 1�GRvu
g�R2�eQ

        SERVICE_STOPPED �rKa�NvQ Win32 P}_g�N�x
N/f 0 (d��N
N�
g�RU�

        tz�^�vB}bkKNY)�SCM Mbg_U(u
g�R-��[�v1YWe�R\O0�Y�g
g�R�l	g-��[

        1YWe�R\O�GRgeuN�dk-��[0

O(u�e_:

        sc <server> failureflag [service name] [flag]

��c�:

        �b�S
g�R�v1YWe�R\O�ej-��[0�Y�g�P-��[/f 0 (�-�)�GR�S	gvu
g�RU�tz�^

        B}bk
g�R�NvQ�rKa
N/f SERVICE_STOPPED Bf�
g�R�c6R�{t�T (SCM) Mbg

        (Wr�
g�R
N_U(u-��[�v1YWe�R\O0�Y�g�P-��[/f 1�GRvu
g�R2�eQ

        SERVICE_STOPPED �rKa�NvQ Win32 P}_g�N�x
N/f 0 (d��N
N�
g�RU�tz�^�v

        B}bkKNY)�SCM Mbg_U(u�p
g�R-��[�v1YWe�R\O0�Y�g�l	g�p
g�R-��[1YWe�R\O�

        GRgeuN��P-��[0

O(u�e_:

        sc <server> qfailureflag [service name]

�

SERVICE_NAME: %1

FAILURE_ACTIONS_ON_NONCRASH_FAILURES:  TRUE

�

SERVICE_NAME: %1

FAILURE_ACTIONS_ON_NONCRASH_FAILURES:  FALSE

x�c�:

        ���f
g�R�v
g�R�[hQ'`X�%R�x (SID) ^��W-��[0



        �Y�g�P-��[/f "unrestricted"�vuN!k�V�pU�tz�^-N,{NP
g�R_U�R�

        �
g�RU�tz�^_U�RBf�
g�R�c6R�{t�T (SCM) g\�P
g�R�v SID �e�X0R

        
g�RU�tz�^
kVg0�P-��[�S	g(W Win32 O(u�!j_
g�R-NMb	gHe0



        �Y�g�P-��[/f "restricted"�vuN!k�V�pU�tz�^-N,{NP
g�R_U�R��

        
g�RU�tz�^_U�RBf�
g�R�c6R�{t�T (SCM) g\�P
g�R�v SID �e�X0R
g

        �RU�tz�^
kVg0�P-��[�S	g(W Win32 O(u�!j_
g�R-NMb	gHe0dkY�

        �P
g�R�v SID _Ng�e�X0RU�tz�^
kVg�vP�6R SID n�U-N0U�tz�^
kVg

        \/fP�6R�v
kVg0ˊ�S�� MSDN �S�_P�6R
kVg�vs�0}nj
�0�P-��[�S	g(W

        Win32 O(u�!j_
g�R-NMb	gHe0dkY�
\�eqQ(uU�tz�^
g�R�(WU�tz�^

        -NqQT;N�c�v@b	g
g�R�_�-��[dk SID^��W-��[�Mb�����P-��[uHe0

        

        �Y�g�P-��[/f "none"�SCM 
Ng\
g�R�v SID �e�X0R
g�RU�tz�^
kVg0

O(u�e_:

        sc <server> sidtype [service name] [type]



x��:

        type = <none|unrestricted|restricted>

�c�:

        �gb�
g�R�v
g�R�[hQ'`X�%R�x (SID) ^��W-��[0



        �Y�g�P-��[/f "unrestricted"�vuN!k�V�pU�tz�^-N,{NP
g�R_U�R�

        �
g�RU�tz�^_U�RBf�
g�R�c6R�{t�T (SCM) g\�P
g�R�v SID �e�X

        0R
g�RU�tz�^
kVg0�P-��[�S	g(W Win32 O(u�!j_
g�R-NMb	gHe0



        �Y�g�P-��[/f "restricted"�vuN!k�V�pU�tz�^-N,{NP
g�R_U�R��

        
g�RU�tz�^_U�RBf�
g�R�c6R�{t�T (SCM) g\�P
g�R�v SID �e�X0R

        
g�RU�tz�^
kVg0�P-��[�S	g(W Win32 O(u�!j_
g�R-NMb	gHe0dk

        Y��P
g�R�v SID _Ng�e�X�U�tz�^
kVg�vP�6R SID n�U-N0U�tz

        �^
kVg\/fP�6R�v
kVg0ˊ�S�� MSDN �S�_P�6R
kVg�vs�0}nj
�0�P-��[�S

        	g(W Win32 O(u�!j_
g�R-NMb	gHe0dkY�
\�eqQ(uU�tz�^
g�R�(WU�

        tz�^-NqQT;N�c�v@b	g
g�R�_�-��[dk SID^��W�Mb�����P-��[uHe0

        

        �Y�g�P-��[/f "none"�SCM 
Ng\
g�R�v SID �e�X0R
g�RU�tz�^
kVg0

O(u�e_:

        sc <server> qsidtype [service name]

p

SERVICE_NAME: %1

SERVICE_SID_TYPE:  UNRESTRICTED

`

SERVICE_NAME: %1

SERVICE_SID_TYPE:  NONE

l

SERVICE_NAME: %1

        PRIVILEGES       : %2

D                         : %1

L�c�:

        �gb�
g�R@b��vyr�k
kP�-��[0vu�V�pU�tz�^-N,{NP
g�R_U�R��
g�RU�t

        z�^_U�RBf�yr�k
kP�-��[1\guHe0(Wr��kBf��-N�
g�R�c6R�{t�T (SCM)

        \g��{(W�vTU�tz�^-N;N�c�v@b	g
g�R@b����vhQ�yr�k
kP�o�T�6q�_�^

        �zwQ	g���N
kP��vU�tz�^0�Y�g�l	g�c�O�P-��[�\���p
g�R����[hQ'`P[

        �|q}
\�e(W
g�RKN-��[3^6b-N�WL��vU�tz�^���c��v@b	g
kP�0



O(u�e_:

        sc <server> qprivs [service name] <bufferSize>

L�c�:

        ���f
g�R@b��vyr�k
kP�-��[0vu�V�pU�tz�^-N,{NP
g�R_U�R��
g�RU�t

        z�^_U�RBf�yr�k
kP�-��[1\guHe0(Wr�Bf��-N�
g�R�c6R�{t�T (SCM) \

        g��{(W�vTU�tz�^-N;N�c�v@b	g
g�R@b����vhQ�yr�k
kP�o�T�6q�_�^�z

        wQ	g���N
kP��vU�tz�^0�Y�g�l	g�c�O�P-��[�\���p
g�R����[hQ'`P[�|

        q}
\�e(W
g�RKN-��[3^6b-N�WL��vU�tz�^���c��v@b	g
kP�0



O(u�e_:

        sc <server> privs [service name] [privileges]



x��:        

        privileges = <Privileges(�N / (�e�}) R��)>

                     [�O�Y�SeBackupPrivilege/SeRestorePrivilege]



l

SERVICE_NAME: %1

SERVICE_SID_TYPE:  RESTRICTED

 

SDDL 
kP�       
kP�<P

----------       -----------

   GA        -   GENERIC_ALL 

   GR        -   GENERIC_READ 

   GW        -   GENERIC_WRITE 

   GX        -   GENERIC_EXECUTE 

   RC        -   READ_CONTROL 

   SD        -   DELETE 

   WD        -   WRITE_DAC

   WO        -   WRITE_OWNER

   RP        -   SERVICE_START

   WP        -   SERVICE_STOP

   CC        -   SERVICE_QUERY_CONFIG

   DC        -   SERVICE_CHANGE_CONFIG

   LC        -   SERVICE_QUERY_STATUS

   SW        -   SERVICE_ENUMERATE_DEPENDENTS

   LO        -   SERVICE_INTERROGATE

   DT        -   SERVICE_PAUSE_CONTINUE

   CR        -   SERVICE_USER_DEFINED_CONTROL

�

SDDL 
kP�        
kP�<P

----------       -----------

   GA        -   GENERIC_ALL 

   KA        -   GENERIC_ALL

   GR        -   GENERIC_READ 

   GW        -   GENERIC_WRITE 

   GX        -   GENERIC_EXECUTE 

   RC        -   READ_CONTROL 

   SD        -   DELETE 

   WD        -   WRITE_DAC

   WO        -   WRITE_OWNER

   RP        -   SC_MANAGER_QUERY_LOCK_STATUS

   WP        -   SC_MANAGER_MODIFY_BOOT_CONFIG

   CC        -   SC_MANAGER_CONNECT

   DC        -   SC_MANAGER_CREATE_SERVICE

   LC        -   SC_MANAGER_ENUMERATE_SERVICE

   SW        -   SC_MANAGER_LOCK



SERVICE_NAME: %1 %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

(

SERVICE_NAME: %1

DISPLAY_NAME: %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

�

SERVICE_NAME: %1 %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

        PID                : %17

        FLAGS              : %18

�

SERVICE_NAME: %1

DISPLAY_NAME: %2

        TYPE               : %3  %4 %5

        STATE              : %6  %7

        WIN32_EXIT_CODE    : %11  (0x%12)

        SERVICE_EXIT_CODE  : %13  (0x%14)

        CHECKPOINT         : 0x%15

        WAIT_HINT          : 0x%16

        PID                : %17

        FLAGS              : %18

\

f�JT: 
g�R %1 �]-��[�p�N�R_�vQ/e�c�]�}N�Bf0
g�R�S��!q�lck8^K�\O0



D


T1z: %1


g�R SID: %2

�rKa: O(u-N

��c�:

        o�:y
\�a�l\'`
T1z�v
g�R SID W[2N0
T1z�S�N/f�s	gb
NX[(W�v
g�R0

O(u�e_:

        sc showsid [name]

0[SC] %1 1YWe�/����p %20

�c�:

        ���f
g�R�v��|vz�^�Sxe0

O(u�e_:

        sc <server> triggerinfo [service name] <option1> <option2>...



x��:

        start/device/UUID/HwId1/...     <(W+T	gNbYPlxԚX�%R�xW[2Nb�v�[

                                        X�%R�xW[2N�vc�[݈n�Nb�^�%R UUID

                                        W[2N0RT�Bf_U�R
g�R>

        start/custom/UUID/data0/..      <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NN+T	gNbYPASmQ2�MOW[2N<h_

                                        KN�N2�MOnj�e��v (�O�Y ABCDABCD �N

                                        -��[ 4 PMOCQD}�vnj�e) KN�N�N0RT�Bf

                                        _U�R
g�R>

        stop/custom/UUID/data0/...      <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NN+T	gNbYPASmQ2�MOW[2N<h_

                                        KN�N2�MOnj�e��v (�O�Y ABCDABCD �N

                                        -��[ 4 PMOCQD}�vnj�e) KN�N�N0RT�Bf

                                        \Pbk
g�R>

        start/strcustom/UUID/data0/..   <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NN+T	gNbYPx�(uW[2Nnj�e��v

                                        �v�N�N0RT�Bf_U�R
g�R>

        stop/strcustom/UUID/data0/..    <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NN+T	gNbYPx�(uW[2Nnj�e��v

                                        �v�N�N0RT�Bf\Pbk
g�R>

        start/lvlcustom/UUID/data0/..   <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NNS+TI{}(W<h_�pASmQ2�MOxeW[

                                        (�O�Y 0x01) �N
NKNnj�e��v�v�N�N

                                        0RT�Bf_U�R
g�R>

        stop/lvlcustom/UUID/data0/..    <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NNS+TI{}(W<h_�pASmQ2�MOxeW[

                                        (�O�Y 0x01) �N
NKNnj�e��v�v�N�N

                                        0RT�Bf\Pbk
g�R>

        start/kwanycustom/UUID/data0/.. <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NNS+T&{Tnj�e��v (ASmQ2�MO

                                        <h_��O�Y 0x0A03) -N�NNMOCQKN

                                        ܕu�W[�v�N�N0RT�Bf_U�R
g�R>

        stop/kwanycustom/UUID/data0/..  <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NNS+T&{Tnj�e��v (ASmQ2�MO

                                        <h_��O�Y 0x0A03) -N�NNMOCQKN

                                        ܕu�W[�v�N�N0RT�Bf\Pbk
g�R>

        start/kwallcustom/UUID/data0/.. <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NNS+T&{Tnj�e��v (ASmQ2�MO

                                        <h_��O�Y 0x0A03) -N@b	gMOCQKN

                                        ܕu�W[�v�N�N0RT�Bf_U�R
g�R>

        stop/kwallcustom/UUID/data0/..  <(W�O�c�[�� ETW �c�O� UUID

                                        W[2NNS+T&{Tnj�e��v (ASmQ2�MO

                                        <h_��O�Y 0x0A03) -N@b	gMOCQKN

                                        ܕu�W[�v�N�N0RT�Bf\Pbk
g�R>

        start/networkon                 <�S�_,{NP IP MO@WBf_U�R
g�R>

        stop/networkoff                 <�l	g IP MO@WBf\Pbk
g�R>

        start/domainjoin                <�ReQ�}�WBf_U�R
g�R>

        stop/domainleave                <▋��}�WBf\Pbk
g�R>

        start/portopen/parameter        <��_U�}�#��c�WBf_U�R
g�R0dk�Sxe

                                        /f�NR_�R���v<h_:

                                        portnumber;protocolname;imagepath;

                                        servicename>

        stop/portclose/parameter        <ܕ���}�#��c�WBf\Pbk
g�R0dk�Sxe

                                        /f�NR_�R���v<h_:

                                        portnumber;protocolname;imagepath;

                                        servicename>

        start/machinepolicy             <vu��f��D}�SGR���fb��_jBfX[(W�GR

                                        _U�R
g�R>

        start/userpolicy                <vuO(u��D}�SGR���fb��_jBfX[(W�

                                        GR_U�R
g�R>

        start/rpcinterface/UUID         <vu��Bl0RT�f}�[�Nb��v RPC �zޞ
\�a

                                        z_Bf_U�R
g�R>

        start/namedpipe/pipename        <@bc�[wQ
T�{S��v��Bl0RT�Bf_U�R

                                        
g�R0
N��S�b�{S�
T1z�v "\\.\pipe\"

                                        �R>

        delete                          <*Rd��s	g�v��|vz�^�Sxe>

                                                         

0

SERVICE_NAME: %1

T          ݈n�Nb�0RT�     : %1 [�Nb�^�%R GUID]

x          ��                       : %1 [ETW �c�O� UUID]

`          IP MO@W�S(u'`      : %1 [�l	g�S(u�v IP MO@W]

X          �N'`S�Nb�݈n      : %1 [�Nb�^�%R GUID]

��c�:

        �b�S
g�R�v��|vz�^nj
�0

O(u�e_:

        sc <server> qtriggerinfo [service name] <bufferSize>

\            nj�e                       : %1

D

    
g�R %1 \*g{v��NUO_U�Rb\Pbk��|vz�^0

$        _U�R
g�R 

$        \Pbk
g�R

`          IP MO@W�S(u'`      : %1 [,{NP�S(u�v IP MO@W]

T          �}�W�ReQ�rKa         : %1 [�]�ReQ�}�W]

T          �}�W�ReQ�rKa         : %1 [*g�ReQ�}�W]

��c�:

        ���f Win32 
g�Rca(u�v NUMA �{ޞ0

        �P-��[�S	g(W�d	gU�tz�^
g�RBfMb	gHe0

        傁�*Rd��s	g�v-��[�ˊ\�{ޞ�}_�-��[�p -10

        �Y�g�c�O
Nck�x�vca(u�{ޞ�}_�����f��Bl\g

        1YWe0



O(u�e_:

        sc <server> preferrednode [service name] [node number]

X�c�:

        �gb� Win32 
g�Rca(u�v NUMA �{ޞ0

        �P-��[�S	g(W�d	gU�tz�^
g�RBfMb	gHe0

        �Y�gr�
g�R*g-��[ca(u�{ޞ�GR�gb�\g

        1YWe0



O(u�e_:

        sc <server> qpreferrednode [service name]

 

ca(u�{ޞ : %1

L

[�la: �V�p
g�R_U�R^��W�p\P(u�@b�N��|vz�^�p^�O(u-N0]

\          2�kpFr#��c�W�N�N          : %1 [#��c�W��_U]

\          2�kpFr#��c�W�N�N          : %1 [#��c�Wܕ��]

d          �D}�SGR                  : %1 [��f��SGRX[(W]

h          �D}�SGR                  : %1 [O(u��SGRX[(W]

H


T1z: %1


g�R SID: %2

�rKa: ^�O(u-N

�          NETWORK EVENT                : %1 [RPC INTERFACE EVENT]

�          NETWORK EVENT                : %1 [NAMED PIPE EVENT]

p          CUSTOM SYSTEM STATE CHANGE EVENT   : %1 

t�Y�g�SNP
g�R�]ݑ
\�c�[�v
g�R�vT�v�zޞb�Nb�O(uwQ
T�{S�b

RPC ��|vz�^�1\�S��g|vu�P/���0

�c�:

        �S�N���f�WL�
g�R@b(u�v3^6b/f&TO(u�S�{t�v�[�x0



        �Y�gdk-��[�p "true"�(W_U�R
g�RBf�
g�R�c6R�{t�T (SCM)

        gT NetLogon ��Bl3^6b�[�x0



        �Y�gdk-��[�p "false"�SCM \O(u-��[�v3^6b�[�x0

O(u�e_:

        sc <server> managedaccount [service name] [type]



x��:

        type = <true|false>

$

�S�{t�v3^6b: %1

��c�:

        �S�N�gb��pdk
g�R-��[�v3^6b/f&T�d	g�S�{t�v3^6b�[�x0



O(u�e_:

        sc <server> qmanagedaccount [service name]

,

/���: ��|vz�^nj�e<P!qHe



��c�:

        �gb�
g�R/f&Tj:y�p(W�S�Ow�U�tz�^-N_U�R0ˊ�la��`!q�l���fdk-��[0



O(u�e_:

        sc <server> qprotection [service name]

(
g�R %1 �Ow�d\}: !q0

4
g�R %1 �Ow�d\}: WINDOWS0

8
g�R %1 �Ow�d\}: WINDOWS �ϑ0

4
g�R %1 �Ow�d\}: �S�`az_�x�ϑ0

,
g�R %1 �Ow�d\}: !qHe�v<P0

�c�:

        �gb�O(u�
g�R�WL�PԚ��N(W�_c�[O(u�
g�R�{,g�^�z

        KN�vT�]\O���k-N\~b�vMRO(u�0



O(u�e_:

        sc quserservice <service template name>

8O(u�
g�R�{,g %1�,g_j
g�R�WL�PԚ %20

x4VS_VERSION_INFO��
{aJ
{aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft Corporation@FileDescription
g�R�c6R�{t�T-��[�]wQn'FileVersion10.0.19041.7291 (WinBuild.160101.0800).InternalNamesc.exe�.LegalCopyright� Microsoft Corporation. All rights reserved.>OriginalFilenamesc.exe.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.7291DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD