IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x29000 | 0x342ce | ADVAPI32.dll!OpenServiceA |
| 1 | 0x29004 | 0x342be | ADVAPI32.dll!EnumDependentServicesA |
| 2 | 0x29008 | 0x342a4 | ADVAPI32.dll!ControlService |
| 3 | 0x2900c | 0x34292 | ADVAPI32.dll!RegSetValueExA |
| 4 | 0x29010 | 0x34280 | ADVAPI32.dll!RegCreateKeyExA |
| 5 | 0x29014 | 0x3426e | ADVAPI32.dll!RegCloseKey |
| 6 | 0x29018 | 0x34260 | ADVAPI32.dll!FreeSid |
| 7 | 0x2901c | 0x34256 | ADVAPI32.dll!AllocateAndInitializeSid |
| 8 | 0x29020 | 0x3423a | ADVAPI32.dll!EqualSid |
| 9 | 0x29024 | 0x3422e | ADVAPI32.dll!GetTokenInformation |
| 10 | 0x29028 | 0x34218 | ADVAPI32.dll!OpenThreadToken |
| 11 | 0x2902c | 0x34206 | ADVAPI32.dll!OpenProcessToken |
| 12 | 0x29030 | 0x341f2 | ADVAPI32.dll!OpenEventLogA |
| 13 | 0x29034 | 0x341e2 | ADVAPI32.dll!CloseEventLog |
| 14 | 0x29038 | 0x341d2 | ADVAPI32.dll!ClearEventLogA |
| 15 | 0x2903c | 0x341c0 | ADVAPI32.dll!OpenSCManagerA |
| 16 | 0x29040 | 0x341ae | ADVAPI32.dll!EnumServicesStatusExA |
| 17 | 0x29044 | 0x34196 | ADVAPI32.dll!CloseServiceHandle |
| 18 | 0x29048 | 0x34180 | ADVAPI32.dll!CryptGenRandom |
| 19 | 0x2904c | 0x3416e | ADVAPI32.dll!CryptReleaseContext |