IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x1567c | 0x1579c | |
| 1 | 0x15680 | 0x0 | KERNEL32.dll!CloseHandle |
| 2 | 0x15684 | 0x157ac | KERNEL32.dll!CreateFileW |
| 3 | 0x15688 | 0x157ba | KERNEL32.dll!DecodePointer |
| 4 | 0x1568c | 0x157c8 | KERNEL32.dll!DeleteCriticalSection |
| 5 | 0x15690 | 0x157d8 | KERNEL32.dll!EncodePointer |
| 6 | 0x15694 | 0x157f0 | KERNEL32.dll!EnterCriticalSection |
| 7 | 0x15698 | 0x15800 | KERNEL32.dll!ExitProcess |
| 8 | 0x1569c | 0x15818 | KERNEL32.dll!FindClose |
| 9 | 0x156a0 | 0x15826 | KERNEL32.dll!FindFirstFileExW |
| 10 | 0x156a4 | 0x15832 | KERNEL32.dll!FindNextFileW |
| 11 | 0x156a8 | 0x15846 | KERNEL32.dll!FlushFileBuffers |
| 12 | 0x156ac | 0x15856 | KERNEL32.dll!FreeEnvironmentStringsW |
| 13 | 0x156b0 | 0x1586a | KERNEL32.dll!FreeLibrary |
| 14 | 0x156b4 | 0x15884 | KERNEL32.dll!GetACP |
| 15 | 0x156b8 | 0x15892 | KERNEL32.dll!GetCPInfo |
| 16 | 0x156bc | 0x1589c | KERNEL32.dll!GetCommandLineA |
| 17 | 0x156c0 | 0x158a8 | KERNEL32.dll!GetCommandLineW |
| 18 | 0x156c4 | 0x158ba | KERNEL32.dll!GetConsoleMode |
| 19 | 0x156c8 | 0x158cc | KERNEL32.dll!GetConsoleOutputCP |