- DOS Header
- NT Header
- Rich Header
- Sections
- Export
- Imports
- Resource
- Exceptions
- Relocations
- Debugs
- Load config
- IAT
IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x101000 | 0x1515d2 | ADVAPI32.dll!SetSecurityInfo |
| 1 | 0x101008 | 0x151026 | ADVAPI32.dll!LsaLookupSids |
| 2 | 0x101010 | 0x151004 | ADVAPI32.dll!LsaLookupPrivilegeValue |
| 3 | 0x101018 | 0x150fea | ADVAPI32.dll!LsaLookupPrivilegeDisplayName |
| 4 | 0x101020 | 0x150fca | ADVAPI32.dll!LsaLookupNames2 |
| 5 | 0x101028 | 0x150fb8 | ADVAPI32.dll!LsaOpenPolicy |
| 6 | 0x101030 | 0x150fa8 | ADVAPI32.dll!LsaLookupPrivilegeName |
| 7 | 0x101038 | 0x150f8e | ADVAPI32.dll!EnumServicesStatusExW |
| 8 | 0x101040 | 0x150f76 | ADVAPI32.dll!QueryServiceConfigW |
| 9 | 0x101048 | 0x150f60 | ADVAPI32.dll!CreateProcessWithLogonW |
| 10 | 0x101050 | 0x150f46 | ADVAPI32.dll!LsaOpenAccount |
| 11 | 0x101058 | 0x150f34 | ADVAPI32.dll!LsaEnumeratePrivilegesOfAccount |
| 12 | 0x101060 | 0x150f12 | ADVAPI32.dll!LogonUserW |
| 13 | 0x101068 | 0x150f04 | ADVAPI32.dll!CreateProcessAsUserW |
| 14 | 0x101070 | 0x150eec | ADVAPI32.dll!QueryServiceConfig2W |
| 15 | 0x101078 | 0x150ed4 | ADVAPI32.dll!OpenServiceW |
| 16 | 0x101080 | 0x150ec4 | ADVAPI32.dll!RegisterServiceCtrlHandlerExW |
| 17 | 0x101088 | 0x150ea4 | ADVAPI32.dll!LsaEnumerateAccounts |
| 18 | 0x101090 | 0x150e8c | ADVAPI32.dll!LsaFreeMemory |
| 19 | 0x101098 | 0x150e7c | ADVAPI32.dll!SetServiceStatus |