Import table
kernel32.dll
SetLastError, DisableThreadLibraryCalls, CloseHandle, WriteConsoleW, SetFilePointerEx, SetStdHandle, GetConsoleMode, GetConsoleCP, FlushFileBuffers, RaiseException, LCMapStringEx, LoadLibraryW, OutputDebugStringW, HeapReAlloc, HeapAlloc, LoadLibraryExW, LeaveCriticalSection, EnterCriticalSection, GetStringTypeW, GetCPInfo, GetOEMCP, GetACP, IsValidCodePage, GetModuleHandleW, TerminateProcess, GetCurrentProcess, FlsFree, FlsSetValue, FlsGetValue, FlsAlloc, SetUnhandledExceptionFilter, UnhandledExceptionFilter, WideCharToMultiByte, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetTickCount64, GetSystemTimeAsFileTime, QueryPerformanceCounter, GetModuleFileNameA, GetStartupInfoW, InitOnceExecuteOnce, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetFileType, GetProcessHeap, InterlockedIncrement, RtlUnwind, GetModuleFileNameW, WriteFile, GetStdHandle, Sleep, HeapSize, MultiByteToWideChar, GetProcAddress, GetModuleHandleExW, ExitProcess, InterlockedDecrement, HeapFree, GetLastError, IsProcessorFeaturePresent, IsDebuggerPresent, GetCurrentThreadId, GetCommandLineA, DecodePointer, EncodePointer, CreateFileW
ntdll.dll
RtlGetCurrentDirectory_U, ZwDelayExecution, ZwQuerySymbolicLinkObject, ZwOpenSymbolicLinkObject, LdrGetDllHandle, RtlAnsiStringToUnicodeString, RtlxOemStringToUnicodeSize, RtlxAnsiStringToUnicodeSize, RtlOemStringToUnicodeString, NlsMbOemCodePageTag, RtlQueryEnvironmentVariable_U, RtlGetFullPathName_U, RtlExpandEnvironmentStrings_U, ZwQuerySystemInformation, RtlCopySid, RtlUpcaseUnicodeString, LdrLoadDll, LdrGetProcedureAddress, RtlInitAnsiString, RtlInitUnicodeString, LdrUnloadDll, RtlLeaveCriticalSection, RtlEnterCriticalSection, ZwOpenKey, ZwQueryKey, ZwQueryValueKey, RtlEqualSid, ZwCreateKey, ZwQueryVirtualMemory, ZwReadVirtualMemory, RtlOpenCurrentUser, NtClose, ZwQueryInformationToken, ZwQueryInformationProcess, ZwOpenProcess, ZwClose, RtlNtStatusToDosError, memmove, RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap
Export table
AvgModuleFinish
AvgModuleInit
GetAvgObject
GetAvgObject2
GetLockCount