IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x1000 | 0x18b48 | ADVAPI32.dll!RegisterEventSourceW |
| 1 | 0x1008 | 0x18b5a | ADVAPI32.dll!CloseServiceHandle |
| 2 | 0x1010 | 0x18b72 | ADVAPI32.dll!OpenProcessToken |
| 3 | 0x1018 | 0x18b88 | ADVAPI32.dll!DeleteService |
| 4 | 0x1020 | 0x18b9c | ADVAPI32.dll!OpenThreadToken |
| 5 | 0x1028 | 0x18bac | ADVAPI32.dll!OpenSCManagerW |
| 6 | 0x1030 | 0x18bbe | ADVAPI32.dll!StartServiceCtrlDispatcherW |
| 7 | 0x1038 | 0x18bd0 | ADVAPI32.dll!SetThreadToken |
| 8 | 0x1040 | 0x18bee | ADVAPI32.dll!SetSecurityDescriptorGroup |
| 9 | 0x1048 | 0x18c00 | ADVAPI32.dll!OpenServiceW |
| 10 | 0x1050 | 0x18c1e | ADVAPI32.dll!GetTokenInformation |
| 11 | 0x1058 | 0x18c2e | ADVAPI32.dll!RegEnumKeyW |
| 12 | 0x1060 | 0x18c44 | ADVAPI32.dll!RegCreateKeyExW |
| 13 | 0x1068 | 0x18c52 | ADVAPI32.dll!EqualSid |
| 14 | 0x1070 | 0x18c64 | ADVAPI32.dll!RegQueryValueExW |
| 15 | 0x1078 | 0x18c70 | ADVAPI32.dll!DeregisterEventSource |
| 16 | 0x1080 | 0x18c84 | ADVAPI32.dll!InitializeSecurityDescriptor |
| 17 | 0x1088 | 0x18c9c | ADVAPI32.dll!RegDeleteKeyW |
| 18 | 0x1090 | 0x18cbc | ADVAPI32.dll!SetSecurityDescriptorDacl |
| 19 | 0x1098 | 0x18ccc | ADVAPI32.dll!LookupPrivilegeValueW |