Import table
ntdll.dll
memmove, RtlNtStatusToDosError, NtClose, ZwClose, RtlOpenCurrentUser, RtlFreeHeap, RtlReAllocateHeap, RtlAllocateHeap, ZwCreateKey, RtlFreeUnicodeString, ZwQueryValueKey, ZwQueryInformationToken, ZwQueryKey, ZwOpenKey, ZwOpenProcess, ZwQueryInformationProcess, ZwReadVirtualMemory, ZwQueryVirtualMemory, RtlEnterCriticalSection, RtlLeaveCriticalSection, RtlGetFullPathName_U, RtlUpcaseUnicodeString, ZwWaitForSingleObject, ZwCreateFile, ZwQueryInformationFile, ZwWriteFile, ZwQuerySystemInformation, _stricmp, _strcmpi, _strnicmp, towupper, DbgPrint, _aullrem, _aulldiv, _ftol, RtlTimeFieldsToTime, LdrUnloadDll, RtlInitUnicodeString, RtlInitAnsiString, LdrGetProcedureAddress, LdrLoadDll, ZwCreateEvent, ZwSetEvent, RtlQueryEnvironmentVariable_U, ZwSetInformationThread, ZwTerminateProcess, ZwDelayExecution, RtlExpandEnvironmentStrings_U, RtlCreateUnicodeString, RtlDosPathNameToNtPathName_U, RtlAnsiStringToUnicodeString, RtlUnicodeStringToAnsiString, RtlUnicodeStringToOemString, RtlxOemStringToUnicodeSize, RtlxAnsiStringToUnicodeSize, RtlOemStringToUnicodeString, RtlxUnicodeStringToAnsiSize, NlsMbOemCodePageTag, RtlxUnicodeStringToOemSize, ZwQuerySymbolicLinkObject, ZwOpenSymbolicLinkObject, RtlAcquirePebLock, RtlReleasePebLock, RtlGetCurrentDirectory_U, LdrGetDllHandle, RtlDeleteCriticalSection, RtlInitializeCriticalSection, ZwDisplayString, RtlAreBitsSet, RtlFindClearBitsAndSet, RtlClearBits, _allmul, _allshl, _aullshr, memcpy, memset, RtlUnwind
Export table
AvgModuleFinish
AvgModuleInit
GetAvgObject
