IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x67000 | 0x3298a | ADVAPI32.dll!CloseEventLog |
| 1 | 0x67004 | 0x329a6 | ADVAPI32.dll!CryptEncrypt |
| 2 | 0x67008 | 0x3296a | |
| 3 | 0x6700c | 0x0 | COMCTL32.dll!_TrackMouseEvent |
| 4 | 0x67010 | 0x329d0 | COMCTL32.dll!ImageList_Merge |
| 5 | 0x67014 | 0x329ec | COMCTL32.dll!ImageList_Draw |
| 6 | 0x67018 | 0x32a08 | |
| 7 | 0x6701c | 0x0 | KERNEL32.dll!InitializeCriticalSection |
| 8 | 0x67020 | 0x327d4 | KERNEL32.dll!EnterCriticalSection |
| 9 | 0x67024 | 0x327f0 | KERNEL32.dll!LeaveCriticalSection |
| 10 | 0x67028 | 0x32808 | KERNEL32.dll!GetCurrentThreadId |
| 11 | 0x6702c | 0x32820 | KERNEL32.dll!CloseHandle |
| 12 | 0x67030 | 0x32836 | KERNEL32.dll!WaitForSingleObject |
| 13 | 0x67034 | 0x32844 | KERNEL32.dll!FreeLibrary |
| 14 | 0x67038 | 0x3285a | KERNEL32.dll!DeleteCriticalSection |
| 15 | 0x6703c | 0x32868 | KERNEL32.dll!VirtualProtect |
| 16 | 0x67040 | 0x32880 | KERNEL32.dll!GetProcAddress |
| 17 | 0x67044 | 0x32892 | KERNEL32.dll!VirtualAlloc |
| 18 | 0x67048 | 0x328a4 | KERNEL32.dll!GetModuleFileNameW |
| 19 | 0x6704c | 0x327be | KERNEL32.dll!GetTickCount |