AavmRpcProviderUpdateConfiguration, AavmRpcProviderDataChanged, AavmRpcResumeShields, AavmRpcPauseShields, AavmRpcProviderResume, AavmRpcProviderPause, AavmRpcStopShields, AavmRpcProviderStop, AavmRpcGetLastScanDate, AavmRpcQueryThreatObjects, AavmRpcStartScan, AavmRpcStartShields, AavmRpcProviderStart, AavmRpcGetGlobalState, AavmRpcIsProductExpired, AavmRpcBtsSchedule, AavmRpcGetVpsProperty, AavmRpcDestroyBinding, AavmRpcCreateBinding, AavmRpcOpenClosePwd, AavmRpcFirewallGetStatus, AavmRpcGetProviderList, AavmRpcGetProviderInfoList, AavmRpcCheckBlacklistCustomerNo, AavmRpcCheckBlacklistLicenseId, AavmRpcUpgradeEdition, AavmRpcStringDecrypt, AavmRpcScanFile

RegOpenKeyA, RegQueryValueExA, ImpersonateLoggedOnUser, RevertToSelf, OpenProcessToken, DuplicateTokenEx, CreateProcessAsUserW, ConvertStringSecurityDescriptorToSecurityDescriptorW, OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle, RegOpenKeyExW, RegDeleteValueW, RegCloseKey, RegSetValueExW, RegCreateKeyExW, RegOpenKeyW, StartServiceW, ControlService, EnumDependentServicesW, RegOpenCurrentUser, GetTokenInformation, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryValueExW, OpenThreadToken

_basGetLicenseFileCommon@12, _basIsGUIDInFraction@4, _basWebRepInstallPlugin@4, _basResetToFactorySettings@8, _basInstallSoundPack@4, _basDeleteCustomSounds@0, _basWebRepUninstallPlugin@4, _basAdBlockerInstallPlugin@4, _basAdBlockerUninstallPlugin@4, _basKillSidebar@8, _basNetAlert@16, _basRequestDemoLicenseFile@12, _basRequestARLicense@8, _basRequestUpgradeLicenseFile@8, _basProcessActivationCode@36, _basHttpGet@12, _basCreatePath@16, _basGetErrorType@4, _basLogEvent2@24, _basShouldSubmit@4, _notEventId@8, _basGetLanguage@4, _basReinitLanguage@4, _basInitLibrary@4, _basIsComponentInstalled@4, _basResPwdOpen@0, _notInit@0, _notAddEventId@16, _basFreeLibrary@0, _basResPwdClose@0, _notRemEvent@4, _notFree@0, _basU2A@16, _basGetBaseLang@0, _basProductInfo@0, _basGetLicenceType@4, _basGetProductMarkType@4, _basSubmitFile@36, _basA2U@16, _basInitThreadLocale@0, _basGetLicenseContent@20, _basGetRegistrationInfo@20, _basSendAutoRegInfo@8, _basSetRegistrationInfo@28, _basGetLicenseFile@8, _basGetCurrentProductLicenseInfoEx@32, _basIsOtherAVInstalled@4, _strDecrypt@16, _basGenerateExceptionReport@4, _basResPwdFlagsGet@0, _basResPwdFlagsSet@4, _basResPwdSet@4, _basResPwdDeletePassword@0, _basStoreBinaryValue@16, _strCrypt@20, _basResPwdCheck@4, _basResPwdIsEmpty@0, _basStringToSubmitPropertyArray@16, _basSetLicenseFileCommon@12, _basImexExportSettings@12, _basImexImportSettings@8, _basImexUnpackPackage@16, _basGetCurrentProductLicenseInfo@28, _basGetStringValue@16, _basGetDWORDValue@12, _basInitThreadLocaleExt@4

_tskChangeExcludedHash@16, _tskIsFileHashExcluded@16, _tskLogSuspiciousAction@32, _tskFileTrezor@16, _tskGetFileUrlAndHash@36, _tskLaunchSyncer@20, _tskDestructFalsePositiveSubmit@4, _tskPrepareFalsePositiveSubmit@8, _tskVirusAction@4, _tskAllocResultO@28, _tskDestructVirusInfoString@4, _tskFreeResultFileName@16, _tskGetResultFileName@20, _tskConstructVirusInfoStringW@4, _tskFreeNetAlert@4, _tskReleaseReport@4, _tskLogEvent@20, _tskProcessShieldNetAlertAndReport@16, _tskProp2VA@12, _tskPackerBits@8, _tskFreeResult@8, _tskLogResult@12, _tskAllocResultW@28, _tskGetCrashCallback@0, _tskGetHeurCallback@0, _tskLaunchRepair@8, _tskInitLibrary@8, _tskFreeLibrary@0, _tskGetVPSInfo@20, _tskAddNetAlert@8, _tskInitActionContext@8, _tskFreeActionContext@4

secIsProcessTrusted, iniWritePrivateProfileString, fsGetAvastProgramPath, secOpenSharedEvent, fsGetAvastDataPath, ldrIsLoaderLockHeld, usnOpenTracker, usnSaveAll, usnCloseTracker, secCreateSharedEvent, secCreateSharedSemaphore, secCreateSharedFileMapping, secCreateSharedMutex, fsGetAvastLicenseFile, sha256GenerateFromName, secOpenSharedFileMapping, ConvertNtPathToDosPath, usnGetMaskFileCheckpoint, usnDeleteFileCheckpoint, usnCreateFileCheckpoint, base64Encode, cmnbInit, cmnbFree, secOpenSharedMutex, secOpenSharedSemaphore, fsGetAvastLogPath, strMatchesWildcards, DSA_FileVerify, iniWritePrivateProfileInt, iniGetPrivateProfileInt, iniGetPrivateProfileString, base64Decode, GetHardwareId

MD5Update, MD5Init, MD5Final

dep_fsExtractDriveRoot, dep_fsSeekReadFile, dep_osIsWin64, dep_strFreeString, dep_strCurrToNewUtf8, dep_fsCreateFromHandle, dep_fsEnableWow64FsRedirection, dep_osGetSystemDir, dep_strUnicodeToNormal, dep_secRestorePrivilege, dep_secSetPrivilege, dep_secGetPublicSecurity, dep_fsCloseFile, dep_fsOpenFileX, dep_fsRemoveFolderRecursive, dep_strUnicodeToNewNormal, dep_strNormalToNewUnicode, dep_osIsWow64, dep_fsReadFile, dep_csDelete, dep_timeGetSystemTime, dep_fsFileTimeToTime, dep_csCreate, dep_csWait, dep_csRelease, dep_strNormalToUnicode

aswSingleWriteBufferReadFromCommChannel

avscanEvalSandboxLog, avfilesPopulateUsn, avfilesDeleteS, avscanRepair, avscanScanReal, avscanSetScanFlags, avscanSetFilePublisherChecking, avscanSetPackerBombRanges, avscanGetScanFlags, avfilesFreeObjectNameBuffer, avfilesGetObjectNameW, avupdateAvastAccount2, avscanIsBankingSite, avscanGetSiteCorrectEntry, avscanIsFileTrusted, avldrGetEngineInformation, avscanExtractAutorunTargets, avfilesFreeObjectName, avfilesCreateObjectName, avfilesEncodeObjectName, avfilesScanRealSingle, avscanSetPackersRestriction, avscanIsUntrustedSigPublisher, avscanGetWhitelistRecord, avscanSetSensitivity, avscanSetScanContext, avscanGetScanContext, avscanIsUrlBlocked, avscanIsTrustedSigPublisher, avscanGetFileSignature, BtsSchedule, avldrGetIniRecord, avscanTransferDataBlock, avldrCreateHandle, avldrLoadModule, avldrCloseModule, avldrGetHandleVersion, avldrPostInstallProcessing, avworkInitialize, avldrGetDefinitionsFolder, avldrDuplicateHandle, avscanSetHeuristicsCallback, avscanSetCrashCallback, avscanSetHashCalc, avscanEnableCloudServices, avscanSetCustomUIPopupCallback, avscanEvalInstrumentationDump, avldrLoadEngineAuxModule, avldrGetEngineModuleName, avscanEvalSandboxBinaryData, avscanReportCertificates

aswGetNextTask, aswCloseQuery, aswGetFirstTask, aswDeleteTask, aswCreateTask, aswSetProviderPropertyInt, aswSetProviderProperty, aswGetPropertyInt, aswGetTaskPropertyEx, aswIsValueInLocalCache, aswGetAtlStringFromLocalCache, aswGetStringFromLocalCache, aswSetStringInLocalCache, aswSetProperty, aswGetStrFromCache, aswRegisterDataFolderEvent, aswGetAvastProperty, aswGetIntFromCache, aswSetPropertyInt, aswSetTaskPropertyIntEx, aswSetTaskPropertyEx, aswCopyTaskDefinitionEx, aswGetProviderPropertyInt, aswGetProviderProperty, aswPropertyFreeLibrary, aswPropertyInitLibrary, aswGetAvastPropertyInt, aswGetProperty, aswSetAvastProperty, aswGetTaskPropertyIntEx, aswGetAtlProperty, aswGetAtlStrFromCache, PropertyUsesDefaultValue

CertOpenStore, CertFreeCertificateContext, CertCloseStore, CertDeleteCertificateFromStore, CertAddEncodedCertificateToStore, CertFindCertificateInStore

DllMain

DllMain

DllMain

EnumProcessModules, GetModuleFileNameExW

GetCaretPos, GetCursorPos, GetActiveWindow, GetCapture, GetClipboardOwner, GetClipboardViewer, GetDesktopWindow, GetFocus, GetForegroundWindow, GetInputState, GetMessagePos, GetMessageTime, GetProcessWindowStation, GetSysColor, GetDialogBaseUnits, GetKeyboardLayout, GetKeyboardType, GetDoubleClickTime, AllowSetForegroundWindow, wsprintfW, OpenDesktopW, CreateDesktopW, WaitForInputIdle, FindWindowW, GetSystemMetrics, GetCaretBlinkTime, GetOpenClipboardWindow, LoadStringW

DestroyEnvironmentBlock, CreateEnvironmentBlock

WinHttpSendRequest, WinHttpQueryOption, WinHttpOpen, WinHttpConnect, WinHttpOpenRequest, WinHttpAddRequestHeaders, WinHttpSetOption, WinHttpReceiveResponse, WinHttpQueryDataAvailable, WinHttpReadData, WinHttpCloseHandle, WinHttpSetStatusCallback