IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0xcf318 | 0xcf59e | kernel32.dll!GetExitCodeProcess |
| 1 | 0xcf31c | 0xcf5a8 | kernel32.dll!LocalFree |
| 2 | 0xcf320 | 0xcf5be | kernel32.dll!CloseHandle |
| 3 | 0xcf324 | 0xcf5ca | kernel32.dll!SizeofResource |
| 4 | 0xcf328 | 0xcf5d8 | kernel32.dll!VirtualProtect |
| 5 | 0xcf32c | 0xcf5ea | kernel32.dll!QueryPerformanceFrequency |
| 6 | 0xcf330 | 0xcf5fc | kernel32.dll!VirtualFree |
| 7 | 0xcf334 | 0xcf618 | kernel32.dll!GetFullPathNameW |
| 8 | 0xcf338 | 0xcf626 | kernel32.dll!ExitProcess |
| 9 | 0xcf33c | 0xcf63a | kernel32.dll!HeapAlloc |
| 10 | 0xcf340 | 0xcf648 | kernel32.dll!GetCPInfoExW |
| 11 | 0xcf344 | 0xcf654 | kernel32.dll!RtlUnwind |
| 12 | 0xcf348 | 0xcf664 | kernel32.dll!GetCPInfo |
| 13 | 0xcf34c | 0xcf670 | kernel32.dll!GetStdHandle |
| 14 | 0xcf350 | 0xcf67c | kernel32.dll!GetModuleHandleW |
| 15 | 0xcf354 | 0xcf68c | kernel32.dll!FreeLibrary |
| 16 | 0xcf358 | 0xcf6a0 | kernel32.dll!HeapDestroy |
| 17 | 0xcf35c | 0xcf6ae | kernel32.dll!ReadFile |
| 18 | 0xcf360 | 0xcf6bc | kernel32.dll!CreateProcessW |
| 19 | 0xcf364 | 0xcf6c8 | kernel32.dll!GetLastError |