IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x27000 | 0x3cec8 | KERNEL32.dll!GetCurrentProcessId |
| 1 | 0x27004 | 0x3ced8 | KERNEL32.dll!WriteFile |
| 2 | 0x27008 | 0x3ceee | KERNEL32.dll!GetCurrentThreadId |
| 3 | 0x2700c | 0x3cefa | KERNEL32.dll!GetCurrentDirectoryW |
| 4 | 0x27010 | 0x3cf10 | KERNEL32.dll!CreateEventW |
| 5 | 0x27014 | 0x3cf28 | KERNEL32.dll!ExitProcess |
| 6 | 0x27018 | 0x3cf38 | KERNEL32.dll!GetProcAddress |
| 7 | 0x2701c | 0x3cf46 | KERNEL32.dll!GetCommandLineA |
| 8 | 0x27020 | 0x3cf66 | KERNEL32.dll!HeapAlloc |
| 9 | 0x27024 | 0x3cf78 | KERNEL32.dll!GetLastError |
| 10 | 0x27028 | 0x3cf84 | KERNEL32.dll!SetLastError |
| 11 | 0x2702c | 0x3cf94 | KERNEL32.dll!InterlockedIncrement |
| 12 | 0x27030 | 0x3cfa4 | KERNEL32.dll!InterlockedDecrement |
| 13 | 0x27034 | 0x3cfbc | KERNEL32.dll!EncodePointer |
| 14 | 0x27038 | 0x3cfd4 | KERNEL32.dll!DecodePointer |
| 15 | 0x2703c | 0x3cfe4 | KERNEL32.dll!GetModuleHandleExW |
| 16 | 0x27040 | 0x3cff4 | KERNEL32.dll!MultiByteToWideChar |
| 17 | 0x27044 | 0x3d00a | KERNEL32.dll!GetStdHandle |
| 18 | 0x27048 | 0x3d020 | KERNEL32.dll!GetModuleFileNameW |
| 19 | 0x2704c | 0x3d030 | KERNEL32.dll!GetProcessHeap |