Is it usual for the Import Address Table and the Import Table to be separated by close to 200k bytes? I'm looking at VC++6 code where the IAT is at start of rdata section and the importtable at the end.