IAT
| # | rva | value | meaning |
|---|---|---|---|
| 0 | 0x8000 | 0xdc2a | ADVAPI32.dll!OpenServiceA |
| 1 | 0x8004 | 0xdc62 | ADVAPI32.dll!StartServiceA |
| 2 | 0x8008 | 0xdc52 | ADVAPI32.dll!CloseServiceHandle |
| 3 | 0x800c | 0xdc3c | ADVAPI32.dll!CryptReleaseContext |
| 4 | 0x8010 | 0xdc14 | ADVAPI32.dll!RegCreateKeyW |
| 5 | 0x8014 | 0xdc04 | ADVAPI32.dll!RegSetValueExA |
| 6 | 0x8018 | 0xdbf2 | ADVAPI32.dll!RegQueryValueExA |
| 7 | 0x801c | 0xdbde | ADVAPI32.dll!RegCloseKey |
| 8 | 0x8020 | 0xdbd0 | ADVAPI32.dll!OpenSCManagerA |
| 9 | 0x8024 | 0xdc72 | |
| 10 | 0x8028 | 0x0 | KERNEL32.dll!GetFileAttributesW |
| 11 | 0x802c | 0xd8fc | KERNEL32.dll!GetFileSizeEx |
| 12 | 0x8030 | 0xd912 | KERNEL32.dll!CreateFileA |
| 13 | 0x8034 | 0xd922 | KERNEL32.dll!InitializeCriticalSection |
| 14 | 0x8038 | 0xd930 | KERNEL32.dll!DeleteCriticalSection |
| 15 | 0x803c | 0xd94c | KERNEL32.dll!ReadFile |
| 16 | 0x8040 | 0xd964 | KERNEL32.dll!GetFileSize |
| 17 | 0x8044 | 0xd970 | KERNEL32.dll!WriteFile |
| 18 | 0x8048 | 0xd97e | KERNEL32.dll!LeaveCriticalSection |
| 19 | 0x804c | 0xd98a | KERNEL32.dll!EnterCriticalSection |