GetFileSize, CreateFileMappingW, MapViewOfFile, SetEndOfFile, SetFilePointer, DuplicateHandle, UnmapViewOfFile, LoadLibraryA, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, SetEvent, CreateEventW, GetOverlappedResult, CancelIo, WaitForSingleObject, WaitForMultipleObjects, GetCurrentProcessId, GetVersionExW, GetCurrentThreadId, GetFileAttributesW, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, InterlockedExchange, ReleaseMutex, CreateMutexW, GetLastError, SetLastError, CreateFileW, SetNamedPipeHandleState, WaitNamedPipeW, WriteFile, CloseHandle, ReadFile, LocalAlloc, LocalFree, GetTickCount, GetSystemTimeAsFileTime, Sleep, FreeLibrary, LoadLibraryW, GetProcAddress, GetSystemInfo, GetCurrentProcess, GetCurrentDirectoryW

DllMain

RtlAreBitsSet, RtlAcquirePebLock, RtlFindClearBitsAndSet, RtlClearBits, RtlReleasePebLock, ZwResetEvent, ZwSetEvent, ZwCreateEvent, RtlUnwind, RtlDeleteCriticalSection, RtlInitializeCriticalSection, RtlEnterCriticalSection, RtlLeaveCriticalSection, ZwDuplicateObject, ZwQueryInformationProcess, RtlFreeUnicodeString, ZwCreateKey, RtlOpenCurrentUser, ZwOpenFile, ZwQueryValueKey, ZwOpenKey, ZwQueryKey, ZwFsControlFile, ZwReadFile, ZwWriteFile, ZwSetInformationFile, RtlCreateUnicodeString, _allmul, ZwCancelIoFile, ZwWaitForMultipleObjects, ZwQuerySymbolicLinkObject, ZwOpenSymbolicLinkObject, ZwQueryInformationFile, ZwQuerySystemInformation, ZwUnmapViewOfSection, ZwMapViewOfSection, ZwCreateSection, ZwWaitForSingleObject, ZwDelayExecution, ZwSetInformationThread, ZwClose, memmove, RtlInitUnicodeString, ZwReleaseMutant, RtlNtStatusToDosError, ZwTerminateProcess, _chkstk, RtlReAllocateHeap, RtlFreeHeap, RtlAllocateHeap, _strnicmp, _stricmp, _aullrem, DbgPrint, _aulldiv, memset, memcpy, LdrLoadDll, LdrUnloadDll, LdrGetProcedureAddress, RtlInitAnsiString, RtlCompareUnicodeString, RtlUpcaseUnicodeString, _allrem, RtlOemStringToUnicodeString, RtlUnicodeStringToOemString, RtlxOemStringToUnicodeSize, NlsMbOemCodePageTag, RtlxUnicodeStringToOemSize, RtlxAnsiStringToUnicodeSize, RtlAnsiStringToUnicodeString, RtlxUnicodeStringToAnsiSize, RtlUnicodeStringToAnsiString, _aullshr, _allshl, LdrGetDllHandle, DbgBreakPoint, _ftol, ZwDisplayString