AavmRpcCreateBinding, AavmRpcGetVpsProperty, AavmRpcBtsSchedule, AavmRpcGetGlobalState, AavmRpcProviderStart, AavmRpcStartShields, AavmRpcProviderStop, AavmRpcStopShields, AavmRpcProviderPause, AavmRpcProviderResume, AavmRpcPauseShields, AavmRpcResumeShields, AavmRpcProviderDataChanged, AavmRpcProviderUpdateConfiguration, AavmRpcGetProviderList, AavmRpcGetProviderInfoList, AavmRpcCheckBlacklistCustomerNo, AavmRpcCheckBlacklistLicenseId, AavmRpcUpgradeEdition, AavmRpcOpenClosePwd, AavmRpcDestroyBinding

CloseServiceHandle, SetSecurityDescriptorDacl, OpenSCManagerW, OpenServiceW, QueryServiceStatus, RegOpenKeyExW, RegDeleteValueW, RegSetValueExW, RegCloseKey, RegQueryValueExW, GetTokenInformation, EnumDependentServicesW, ControlService, StartServiceW, OpenProcessToken, CreateProcessAsUserW, RegOpenKeyW, RegQueryValueExA, RegOpenKeyA, InitializeSecurityDescriptor

_basReinitLanguage@4, _basProcessActivationCode@32, _basRequestUpgradeLicenseFile@8, _basRequestDemoLicenseFile@8, _basInstallSoundPack@4, _basDeleteCustomSounds@0, _basGetDWORDValue@12, _basIsComponentInstalled@4, _basCreatePath@16, _basU2A@16, _basLogEvent2@24, _basShouldSubmit@4, _basSetLicenseFile@8, _basStringToSubmitPropertyArray@16, _basResPwdIsEmpty@0, _basGetProductLicenseInfo@32, _basCreateWhsConnectorFwRules@0, _basWriteProfileString@12, _basResPwdCheck@4, _strEncode@12, _basResPwdDeletePassword@0, _basResPwdSet@4, _basResPwdFlagsSet@4, _basResPwdFlagsGet@0, _basGenerateExceptionReport@4, _basIsOtherAVInstalled@4, _basGetCurrentProductLicenseInfo@28, _basGetLicenseFile@8, _basSetRegistrationInfo@28, _basGetRegistrationInfo@20, _basProductInfo@0, _basGetProfileString@20, _basInitThreadLocale@0, _basGetBaseLang@0, _notEvent@4, _basGetProfileInt@12, _basGetLanguage@4, _basInitLibrary@4, _basResPwdOpen@0, _notInit@0, _notAddEvent@12, _basFreeLibrary@0, _basResPwdClose@0, _notRemEvent@4, _notFree@0, _basGetProcAddress@8, _basSubmitFile@36, _basA2U@16, _basU2A@12, _basGetLanguage@0, _basIsComponentEnumPossible@4

_tskLogSuspiciousAction@32, _tskFileTrezor@16, _tskGetFileUrlAndHash@32, _tskLogResult@12, _tskAllocResultW@28, _tskFreeResult@8, _tskVirusAction@4, _tskAllocResultO@28, _tskDestructVirusInfoString@4, _tskFreeResultFileName@16, _tskGetResultFileName@20, _tskConstructVirusInfoStringW@4, _tskFreeNetAlert@4, _tskReleaseReport@4, _tskLogEvent@20, _tskProcessShieldNetAlertAndReport@12, _tskInitLibrary@8, _tskFreeLibrary@0, _tskGetVPSInfo@20, _tskProp2VA@12, _tskPackerBits@8, _tskLaunchRepair@8, _tskLaunchSyncer@20, _tskGetHeurCallback@0, _tskGetCrashCallback@0

usnCloseTracker, usnSaveAll, usnOpenTracker, fsGetAvastDataPath, fsGetAvastProgramPath, fsGetAvastLogPath, DSA_FileVerify, cmnbFree, sha256GenerateFromName, ConvertNtPathToDosPath, usnGetMaskFileCheckpoint, usnDeleteFileCheckpoint, usnCreateFileCheckpoint, cmnbInit

dep_fsRemoveFolderRecursive, dep_secGetPublicSecurity, dep_secSetPrivilege, dep_secRestorePrivilege, dep_fsCreateFromHandle, dep_fsCloseFile, dep_fsOpenFileX

avldrCloseModule, avldrGetHandleVersion, avldrPostInstallProcessing, avldrGetDefinitionsFolder, avldrCreateHandle, avldrLoadModule, avworkInitialize, avscanSetHeuristicsCallback, avscanSetCrashCallback, avscanSetHashCalc, avldrGetIniRecord, BtsSchedule, avscanGetFileSignature, avscanIsTrustedSigPublisher, avscanIsUrlBlocked, avscanGetScanContext, avscanSetScanContext, avldrGetEngineModuleName, avscanSetSensitivity, avscanGetWhitelistRecord, avscanSetPackersRestriction, avfilesScanRealSingle, avfilesEncodeObjectName, avfilesCreateObjectName, avfilesFreeObjectName, avldrGetEngineInformation, avscanIsFileTrusted, avfilesGetObjectNameW, avfilesFreeObjectNameBuffer, avscanGetScanFlags, avscanSetPackerBombRanges, avscanSetFilePublisherChecking, avscanSetScanFlags, avscanScanReal, avscanRepair, avfilesDeleteS, avfilesPopulateUsn, avldrDuplicateHandle

GetCurrentThreadId, SetCurrentDirectoryW, GetCurrentDirectoryW, MapViewOfFile, CreateMutexW, CreateFileMappingW, CreateSemaphoreW, lstrlenW, lstrcatW, InterlockedCompareExchange, SetThreadPriority, HeapAlloc, CreateIoCompletionPort, TlsAlloc, GetSystemInfo, LoadLibraryW, GetSystemDirectoryW, InitializeCriticalSection, SetErrorMode, GetCurrentProcessId, UnmapViewOfFile, SetEvent, ReleaseMutex, PulseEvent, GetCurrentProcess, SetProcessWorkingSetSize, lstrcpyW, CloseHandle, CreateFileW, ResetEvent, WaitForSingleObject, Sleep, OutputDebugStringW, QueryPerformanceCounter, GetQueuedCompletionStatus, DeviceIoControl, TlsSetValue, FindClose, FindNextFileW, GetLastError, DeleteFileW, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetFileTime, CompareFileTime, TerminateThread, HeapFree, ReleaseSemaphore, DeleteCriticalSection, TlsFree, TryEnterCriticalSection, WideCharToMultiByte, MultiByteToWideChar, GetSystemTimeAsFileTime, GetVersionExW, ResumeThread, GetProcessHeap, GetModuleHandleW, OpenProcess, TlsGetValue, GetPrivateProfileIntW, ExpandEnvironmentStringsW, FormatMessageW, HeapReAlloc, OpenEventW, CreateThread, CreateEventW, GetTickCount, FindNextChangeNotification, FindFirstChangeNotificationW, GetComputerNameW, GetTempFileNameW, GetTempPathW, GetExitCodeProcess, CreateProcessW, GetPrivateProfileStringW, lstrcmpA, lstrlenA, RaiseException, LoadLibraryA, InterlockedExchange, LocalFree, LocalAlloc, SetLastError, GetCurrentThread, GetLocalTime, GetVersion, FlushFileBuffers, WriteFile, GetTimeFormatW, GetDateFormatW, SetEndOfFile, GetFileSize, SetFilePointer, DuplicateHandle, lstrcmpW, OpenSemaphoreW, OpenMutexW, TerminateProcess, GetModuleFileNameW, OpenFileMappingW, GetDriveTypeW, lstrcpynW, SetPriorityClass, GetPriorityClass, SystemTimeToFileTime, GetSystemTime, InterlockedIncrement, LoadLibraryExW, GetProcAddress, InterlockedDecrement, FreeLibrary, EnterCriticalSection, LeaveCriticalSection, FindFirstFileW, FindCloseChangeNotification

DllMain

DllMain

EnumProcessModules, GetModuleFileNameExW

MessageBoxW, MsgWaitForMultipleObjects, DispatchMessageW, PeekMessageW, LoadStringW, FindWindowW, wsprintfW