IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x8000 | 0x8a3c | ADVAPI32.dll!RegEnumKeyW |
| 1 | 0x8004 | 0x8970 | ADVAPI32.dll!RegQueryValueExW |
| 2 | 0x8008 | 0x897e | ADVAPI32.dll!RegSetValueExW |
| 3 | 0x800c | 0x8992 | ADVAPI32.dll!RegCloseKey |
| 4 | 0x8010 | 0x89a4 | ADVAPI32.dll!RegDeleteValueW |
| 5 | 0x8014 | 0x89b2 | ADVAPI32.dll!RegDeleteKeyW |
| 6 | 0x8018 | 0x89c4 | ADVAPI32.dll!AdjustTokenPrivileges |
| 7 | 0x801c | 0x89d4 | ADVAPI32.dll!LookupPrivilegeValueW |
| 8 | 0x8020 | 0x89ec | ADVAPI32.dll!OpenProcessToken |
| 9 | 0x8024 | 0x8a04 | ADVAPI32.dll!SetFileSecurityW |
| 10 | 0x8028 | 0x8a18 | ADVAPI32.dll!RegOpenKeyExW |
| 11 | 0x802c | 0x8a2c | ADVAPI32.dll!RegEnumValueW |
| 12 | 0x8030 | 0x8960 | |
| 13 | 0x8034 | 0x0 | COMCTL32.dll!#17 |
| 14 | 0x8038 | 0x80000011 | COMCTL32.dll!ImageList_Create |
| 15 | 0x803c | 0x8b76 | COMCTL32.dll!ImageList_Destroy |
| 16 | 0x8040 | 0x8b4c | COMCTL32.dll!ImageList_AddMasked |
| 17 | 0x8044 | 0x8b60 | |
| 18 | 0x8048 | 0x0 | GDI32.dll!SetBkMode |
| 19 | 0x804c | 0x8fd0 | GDI32.dll!SetBkColor |