Import table
advapi32.dll
StartServiceCtrlDispatcherW, AllocateAndInitializeSid, GetLengthSid, InitializeAcl, AddAccessDeniedAce, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, FreeSid, RegisterServiceCtrlHandlerExW, SetThreadToken, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegOpenKeyExW, RegQueryValueExW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegisterEventSourceW, ReportEventW, DeregisterEventSource, DuplicateTokenEx, UnregisterTraceGuids, RegisterTraceGuidsA, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, ConvertStringSecurityDescriptorToSecurityDescriptorA, RegCreateKeyExW, RegSetValueExW, RegCloseKey, DuplicateToken, GetTokenInformation, LookupAccountSidA, TraceMessage, SetServiceStatus
avengdll.dll
AvRtlScanMappedFile, AvRtlAsynchronousResult, AvRtlDisinfectFile, AvRtlDeleteFile, AvRtlNeutralizeFile, AvRtlMoveFile, AvRtlScanBoot, RtlFreeMemory, AvRtlSendExclusions, AvRtlAddDiscard, AvRtlSendWLNames, AvRtlWriteNeutralizeConfig, AvRtlSendExtensions, AvRtlWriteConfig, AvRtlReadInformation, AvRtlFinishAnalyzer, AvRtlSetNotifyRoutine, AvRtlInitializeAnalyzer, RtlGetHealthStatus, AvRtlDisinfectBoot, AvRtlRenameFile
fltlib.dll
FilterCreate, FilterSendMessage, FilterGetMessage, FilterReplyMessage, FilterClose, FilterConnectCommunicationPort
kernel32.dll
DllMain
rpcrt4.dll
RpcMgmtStopServerListening, NdrServerCall2, RpcServerUnregisterIf, RpcServerRegisterAuthInfoA, RpcServerUseProtseqEpA, RpcServerRegisterIf, RpcServerListen
user32.dll
CharUpperBuffW, wsprintfA, CharNextExA, CharPrevExA