IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x58000 | 0x5c8e4 | KERNEL32.dll!VirtualFree |
| 1 | 0x58004 | 0x5c8f4 | KERNEL32.dll!GetModuleHandleA |
| 2 | 0x58008 | 0x5c902 | KERNEL32.dll!LoadLibraryA |
| 3 | 0x5800c | 0x5c916 | KERNEL32.dll!GetCurrentProcessId |
| 4 | 0x58010 | 0x5c926 | KERNEL32.dll!GetModuleFileNameW |
| 5 | 0x58014 | 0x5c93c | KERNEL32.dll!InitializeCriticalSection |
| 6 | 0x58018 | 0x5c952 | KERNEL32.dll!EnterCriticalSection |
| 7 | 0x5801c | 0x5c96e | KERNEL32.dll!LeaveCriticalSection |
| 8 | 0x58020 | 0x5c986 | KERNEL32.dll!GetCurrentThreadId |
| 9 | 0x58024 | 0x5c99e | KERNEL32.dll!ExitProcess |
| 10 | 0x58028 | 0x5c9b4 | KERNEL32.dll!CreateThread |
| 11 | 0x5802c | 0x5c9c2 | KERNEL32.dll!WaitForSingleObject |
| 12 | 0x58030 | 0x5c9d2 | KERNEL32.dll!CloseHandle |
| 13 | 0x58034 | 0x5c9e8 | KERNEL32.dll!DeleteCriticalSection |
| 14 | 0x58038 | 0x5c9f6 | KERNEL32.dll!FreeLibrary |
| 15 | 0x5803c | 0x5ca0e | KERNEL32.dll!VirtualAlloc |
| 16 | 0x58040 | 0x5ca1c | KERNEL32.dll!GetCommandLineW |
| 17 | 0x58044 | 0x5ca2c | KERNEL32.dll!CreateEventA |
| 18 | 0x58048 | 0x5ca3e | KERNEL32.dll!Sleep |
| 19 | 0x5804c | 0x5ca4e | KERNEL32.dll!SetEvent |