- DOS Header
- NT Header
- Rich Header
- Sections
- Imports
- Resource
- Exceptions
- Certificate
- Relocations
- Debugs
- Load config
- IAT
- Delay import
IAT
# | rva | value | meaning |
---|---|---|---|
0 | 0x18c000 | 0x1d5e20 | KERNEL32.dll!GetOEMCP |
1 | 0x18c008 | 0x1d5e32 | KERNEL32.dll!GetUserDefaultUILanguage |
2 | 0x18c010 | 0x1d5e3e | KERNEL32.dll!GetLocaleInfoA |
3 | 0x18c018 | 0x1d5e5a | KERNEL32.dll!GetSystemDefaultLangID |
4 | 0x18c020 | 0x1d5e6c | KERNEL32.dll!ReadFile |
5 | 0x18c028 | 0x1d5e86 | KERNEL32.dll!GetVolumeInformationW |
6 | 0x18c030 | 0x1d5e92 | KERNEL32.dll!SetLastError |
7 | 0x18c038 | 0x1d5eaa | KERNEL32.dll!DeleteVolumeMountPointA |
8 | 0x18c040 | 0x1d5eba | KERNEL32.dll!DeviceIoControl |
9 | 0x18c048 | 0x1d5ed4 | KERNEL32.dll!GetDriveTypeA |
10 | 0x18c050 | 0x1d5ee6 | KERNEL32.dll!QueryDosDeviceA |
11 | 0x18c058 | 0x1d5ef6 | KERNEL32.dll!FindFirstVolumeA |
12 | 0x18c060 | 0x1d5f08 | KERNEL32.dll!GetVolumeInformationA |
13 | 0x18c068 | 0x1d5f1c | KERNEL32.dll!GetVolumeNameForVolumeMountPointA |
14 | 0x18c070 | 0x1d5f34 | KERNEL32.dll!MultiByteToWideChar |
15 | 0x18c078 | 0x1d5f58 | KERNEL32.dll!Sleep |
16 | 0x18c080 | 0x1d5f6e | KERNEL32.dll!GetLastError |
17 | 0x18c088 | 0x1d5f76 | KERNEL32.dll!SetVolumeMountPointA |
18 | 0x18c090 | 0x1d5f86 | KERNEL32.dll!CreateFileA |
19 | 0x18c098 | 0x1d5f9e | KERNEL32.dll!DefineDosDeviceA |