Import table
advapi32.dll
RegSetValueExW, CreateProcessAsUserW, CreateRestrictedToken, RegCloseKey, RegOpenKeyExW, RegQueryValueExW
avgntopensslx.dll
OPENSSL_add_all_algorithms_noconf, ASN1_item_d2i_bio, BIO_new_mem_buf, RSA_size, CRYPTO_cleanup_all_ex_data, ERR_free_strings, EVP_MD_CTX_cleanup, ERR_remove_state, EVP_cleanup, EVP_PKEY_free, EVP_md2, OBJ_nid2sn, X509_ALGOR_free, X509_ALGOR_it, X509_PUBKEY_it, X509_PUBKEY_free, X509_PUBKEY_get, X509_NAME_print_ex, BIO_printf, BIO_new, BIO_s_mem, ASN1_INTEGER_get, X509_NAME_it, X509_NAME_free, OBJ_find_sigid_algs, EVP_DigestInit_ex, ASN1_BIT_STRING_free, ASN1_INTEGER_it, EVP_VerifyFinal, ASN1_INTEGER_free, ASN1_BIT_STRING_it, CRYPTO_set_mem_functions, EVP_DigestFinal, RSA_public_encrypt, OBJ_obj2nid, X509_get_issuer_name, sk_value, d2i_X509, sk_num, X509_free, X509_get_subject_name, CONF_modules_unload, EVP_add_digest, BIO_free, EVP_get_digestbyname, EVP_DigestInit, EVP_MD_CTX_init, EVP_PKEY_get1_RSA, EVP_DigestUpdate, RSA_free
avgsysx.dll
DllMain
kernel32.dll
DisableThreadLibraryCalls, SetLastError, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, DecodePointer, EncodePointer, WaitForMultipleObjectsEx, CloseHandle, CancelIo, DeviceIoControl, GetLastError, GetOverlappedResult, CreateFileW, ExpandEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetExitCodeProcess, CreateProcessW, WaitForMultipleObjects
msvcr100.dll
DllMain
msvcr110.dll
DllMain
msvcr90.dll
DllMain
ntdll.dll
LdrUnloadDll, ZwQueryInformationProcess, ZwClose, RtlNtStatusToDosError, RtlInitAnsiString, LdrGetProcedureAddress, RtlCreateUnicodeString, ZwCreateNamedPipeFile, ZwSetInformationThread, ZwOpenFile, ZwCancelIoFile, LdrLoadDll, ZwCreateEvent, ZwWaitForSingleObject, ZwSetEvent, RtlFreeUnicodeString, ZwCreateFile, ZwFsControlFile, ZwReadFile, ZwMapViewOfSection, ZwFlushVirtualMemory, ZwQuerySystemInformation, ZwSetInformationFile, ZwUnmapViewOfSection, ZwFlushBuffersFile, ZwCreateSection, ZwQueryInformationFile, ZwWriteFile, RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, memmove, _allmul, _aulldiv, memset, _allshl, memcpy, _chkstk, _alldiv, _aulldvrm, RtlInitUnicodeString, ZwDelayExecution, RtlCreateUserThread, LdrShutdownThread, CsrClientCallServer, NtTerminateThread, NtResumeThread, RtlxUnicodeStringToOemSize, NlsMbOemCodePageTag, RtlxUnicodeStringToAnsiSize, RtlOemStringToUnicodeString, RtlxAnsiStringToUnicodeSize, RtlxOemStringToUnicodeSize, RtlUnicodeStringToOemString, RtlUnicodeStringToAnsiString, RtlAnsiStringToUnicodeString, RtlCompareUnicodeString, RtlDowncaseUnicodeString, RtlUpcaseUnicodeString, LdrGetDllHandle, strncpy, strchr, qsort, _allrem, _aullshr, _aullrem, ZwOpenSymbolicLinkObject, ZwQuerySymbolicLinkObject, ZwReadVirtualMemory, ZwOpenProcess, ZwOpenKey, ZwQueryKey, RtlOpenCurrentUser, ZwSetInformationToken, ZwEnumerateKey, ZwDeleteKey, ZwQueryInformationToken, ZwDuplicateToken, ZwEnumerateValueKey, ZwQueryValueKey, ZwSetValueKey, RtlEqualSid, ZwCreateKey, ZwReleaseMutant, ZwTerminateThread, ZwResumeThread, ZwDuplicateObject, ZwTerminateProcess, ZwQueryInformationThread, ZwResetEvent, ZwQueryVirtualMemory, ZwDeviceIoControlFile
shell32.dll
ShellExecuteExW
user32.dll
MsgWaitForMultipleObjects, MsgWaitForMultipleObjectsEx
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
Export table
GetAvgObject
GetAvgObject2
GetLockCount
