IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x3000 | 0x35cc | ADVAPI32.dll!RegisterServiceCtrlHandlerA |
| 1 | 0x3004 | 0x35ae | ADVAPI32.dll!SetServiceStatus |
| 2 | 0x3008 | 0x359a | ADVAPI32.dll!OpenSCManagerA |
| 3 | 0x300c | 0x3588 | ADVAPI32.dll!CreateServiceA |
| 4 | 0x3010 | 0x3576 | ADVAPI32.dll!RegOpenKeyA |
| 5 | 0x3014 | 0x3568 | ADVAPI32.dll!RegSetValueExA |
| 6 | 0x3018 | 0x3556 | ADVAPI32.dll!RegCloseKey |
| 7 | 0x301c | 0x3548 | ADVAPI32.dll!CloseServiceHandle |
| 8 | 0x3020 | 0x3532 | ADVAPI32.dll!OpenProcessToken |
| 9 | 0x3024 | 0x351e | ADVAPI32.dll!LookupPrivilegeValueA |
| 10 | 0x3028 | 0x3506 | ADVAPI32.dll!AdjustTokenPrivileges |
| 11 | 0x302c | 0x34ee | ADVAPI32.dll!SetEntriesInAclA |
| 12 | 0x3030 | 0x35fc | ADVAPI32.dll!GetSecurityInfo |
| 13 | 0x3034 | 0x3610 | ADVAPI32.dll!SetSecurityInfo |
| 14 | 0x3038 | 0x35ea | |
| 15 | 0x303c | 0x0 | KERNEL32.dll!UnmapViewOfFile |
| 16 | 0x3040 | 0x34a4 | KERNEL32.dll!SetSystemTime |
| 17 | 0x3044 | 0x33b8 | KERNEL32.dll!GetVersionExA |
| 18 | 0x3048 | 0x3494 | KERNEL32.dll!CloseHandle |
| 19 | 0x304c | 0x3486 | KERNEL32.dll!MapViewOfFile |