imp_9x.txt

此为本书的配套光盘.本书不但由浅入深地讲解了软件保护技术

; Syntax for each function in a thunk (the separator is a TAB)
; ------------------------------------------------------------
; Flag   RVA   ModuleName   Ordinal   Name
;
; Details for <Valid> parameter:
; ------------------------------
; Flag:  0 = valid: no  -> - Name contains the address of the redirected API (you can set
;                            it to zero if you edit it).
;                          - Ordinal is not considered but you should let '0000' as value.
;                          - ModuleName is not considered but you should let '?' as value.
;
;        1 = valid: yes -> All next parameters on the line will be considered.
;                          Function imported by ordinal must have no name (the 4th TAB must
;                                                                          be there though).
;
;        2 = Equivalent to 0 but it is for the loader.
;
;        3 = Equivalent to 1 but it is for the loader.
;
;        4 = Equivalent to 0 with (R) tag.
;
;        5 = Equivalent to 1 with (R) tag.
;
; And finally, edit this file as your own risk! :-)

Target: F:\IMPRES_UCFIR16F\E_BOXEDIT.EXE
OEP: 0000C627	IATRVA: 0003C000	IATSize: 000006DC

FThunk: 0003C000	NbFunc: 0000000E
1	0003C000	advapi32.dll	00DB	RegCreateKeyA
1	0003C004	advapi32.dll	00D8	RegCloseKey
1	0003C008	advapi32.dll	00E3	RegEnumKeyA
1	0003C00C	advapi32.dll	00EE	RegOpenKeyA
1	0003C010	advapi32.dll	00DF	RegDeleteKeyA
1	0003C014	advapi32.dll	00DC	RegCreateKeyExA
1	0003C018	advapi32.dll	00EF	RegOpenKeyExA
1	0003C01C	advapi32.dll	00F7	RegQueryValueExA
1	0003C020	advapi32.dll	0103	RegSetValueExA
1	0003C024	advapi32.dll	00E1	RegDeleteValueA
1	0003C028	advapi32.dll	0102	RegSetValueA
1	0003C02C	advapi32.dll	00F6	RegQueryValueA
1	0003C030	advapi32.dll	0008	AddAce
1	0003C034	advapi32.dll	0025	ControlService

FThunk: 0003C03C	NbFunc: 00000004
1	0003C03C	comctl32.dll	002A	ImageList_AddMasked
1	0003C040	comctl32.dll	0011	InitCommonControls
1	0003C044	comctl32.dll	002E	ImageList_Destroy
1	0003C048	comctl32.dll	002D	ImageList_Create

FThunk: 0003C050	NbFunc: 0000004F
1	0003C050	gdi32.dll	0173	SelectObject
1	0003C054	gdi32.dll	017A	SetBkMode
1	0003C058	gdi32.dll	0195	SetPolyFillMode
1	0003C05C	gdi32.dll	0196	SetROP2
1	0003C060	gdi32.dll	0198	SetStretchBltMode
1	0003C064	gdi32.dll	018B	SetMapMode
1	0003C068	gdi32.dll	019F	SetViewportOrgEx
1	0003C06C	gdi32.dll	014C	OffsetViewportOrgEx
1	0003C070	gdi32.dll	019E	SetViewportExtEx
1	0003C074	gdi32.dll	016F	ScaleViewportExtEx
1	0003C078	gdi32.dll	01A2	SetWindowOrgEx
1	0003C07C	gdi32.dll	01A1	SetWindowExtEx
1	0003C080	gdi32.dll	0170	ScaleWindowExtEx
1	0003C084	gdi32.dll	0172	SelectClipRgn
1	0003C088	gdi32.dll	00C8	ExcludeClipRect
1	0003C08C	gdi32.dll	0142	IntersectClipRect
1	0003C090	gdi32.dll	0149	MoveToEx
1	0003C094	gdi32.dll	0146	LineTo
1	0003C098	gdi32.dll	019A	SetTextAlign
1	0003C09C	gdi32.dll	00F6	GetCurrentPositionEx
1	0003C0A0	gdi32.dll	00B0	DeleteObject
1	0003C0A4	gdi32.dll	00A5	CreateRectRgn
1	0003C0A8	gdi32.dll	016C	RestoreDC
1	0003C0AC	gdi32.dll	013C	GetViewportExtEx
1	0003C0B0	gdi32.dll	013F	GetWindowExtEx
1	0003C0B4	gdi32.dll	00AA	CreateSolidBrush
1	0003C0B8	gdi32.dll	00A0	CreatePatternBrush
1	0003C0BC	gdi32.dll	0162	PtVisible
1	0003C0C0	gdi32.dll	0165	RectVisible
1	0003C0C4	gdi32.dll	01AC	TextOutA
1	0003C0C8	gdi32.dll	00CE	ExtTextOutA
1	0003C0CC	gdi32.dll	00C7	Escape
1	0003C0D0	gdi32.dll	0134	GetTextExtentPoint32A
1	0003C0D4	gdi32.dll	013A	GetTextMetricsA
1	0003C0D8	gdi32.dll	01A8	StretchDIBits
1	0003C0DC	gdi32.dll	0088	CreateCompatibleBitmap
1	0003C0E0	gdi32.dll	00EB	GetCharWidthA
1	0003C0E4	gdi32.dll	0095	CreateFontA
1	0003C0E8	gdi32.dll	00A6	CreateRectRgnIndirect
1	0003C0EC	gdi32.dll	0096	CreateFontIndirectA
1	0003C0F0	gdi32.dll	0131	GetTextColor
1	0003C0F4	gdi32.dll	00E1	GetBkColor
1	0003C0F8	gdi32.dll	0118	GetNearestColor
1	0003C0FC	gdi32.dll	012A	GetStretchBltMode
1	0003C100	gdi32.dll	0123	GetPolyFillMode
1	0003C104	gdi32.dll	012D	GetTextAlign
1	0003C108	gdi32.dll	00E2	GetBkMode
1	0003C10C	gdi32.dll	0124	GetROP2
1	0003C110	gdi32.dll	0138	GetTextFaceA
1	0003C114	gdi32.dll	0140	GetWindowOrgEx
1	0003C118	gdi32.dll	0112	GetMapMode
1	0003C11C	gdi32.dll	0197	SetRectRgn
1	0003C120	gdi32.dll	007D	CombineRgn
1	0003C124	gdi32.dll	016E	SaveDC
1	0003C128	gdi32.dll	0144	LPtoDP
1	0003C12C	gdi32.dll	00AD	DeleteDC
1	0003C130	gdi32.dll	008A	CreateDCA
1	0003C134	gdi32.dll	0175	SetAbortProc
1	0003C138	gdi32.dll	01A4	StartDocA
1	0003C13C	gdi32.dll	01A6	StartPage
1	0003C140	gdi32.dll	00B9	EndPage
1	0003C144	gdi32.dll	00B8	EndDoc
1	0003C148	gdi32.dll	0069	AbortDoc
1	0003C14C	gdi32.dll	013D	GetViewportOrgEx
1	0003C150	gdi32.dll	00A1	CreatePen
1	0003C154	gdi32.dll	00AB	DPtoLP
1	0003C158	gdi32.dll	0166	Rectangle
1	0003C15C	gdi32.dll	0129	GetStockObject
1	0003C160	gdi32.dll	014F	PatBlt
1	0003C164	gdi32.dll	011A	GetObjectA
1	0003C168	gdi32.dll	0179	SetBkColor
1	0003C16C	gdi32.dll	019C	SetTextColor
1	0003C170	gdi32.dll	00F1	GetClipBox
1	0003C174	gdi32.dll	00FA	GetDeviceCaps
1	0003C178	gdi32.dll	0083	CreateBitmap
1	0003C17C	gdi32.dll	0089	CreateCompatibleDC
1	0003C180	gdi32.dll	008F	CreateDIBitmap
1	0003C184	gdi32.dll	0136	GetTextExtentPointA
1	0003C188	gdi32.dll	0072	BitBlt

FThunk: 0003C190	NbFunc: 0000007E
1	0003C190	kernel32.dll	0226	LCMapStringA
1	0003C194	kernel32.dll	0080	BackupSeek
1	0003C198	kernel32.dll	01BC	GetStringTypeA
1	0003C19C	kernel32.dll	00B7	CreateEventW
1	0003C1A0	kernel32.dll	0213	IsBadHugeReadPtr
1	0003C1A4	kernel32.dll	0212	IsBadCodePtr
1	0003C1A8	kernel32.dll	02EE	SetUnhandledExceptionFilter
1	0003C1AC	kernel32.dll	02E0	SetStdHandle
1	0003C1B0	kernel32.dll	00A6	CompareStringA
1	0003C1B4	kernel32.dll	0080	BackupSeek
1	0003C1B8	kernel32.dll	02C7	SetEnvironmentVariableA
1	0003C1BC	kernel32.dll	0214	IsBadHugeWritePtr
1	0003C1C0	kernel32.dll	01B2	GetProfileStringA
1	0003C1C4	kernel32.dll	0319	VirtualAlloc
1	0003C1C8	kernel32.dll	031B	VirtualFree
1	0003C1CC	kernel32.dll	01FF	HeapCreate
1	0003C1D0	kernel32.dll	0200	HeapDestroy
1	0003C1D4	kernel32.dll	01DD	GetVersionExA
1	0003C1D8	kernel32.dll	016D	GetEnvironmentVariableA
1	0003C1DC	kernel32.dll	0179	GetFileType
1	0003C1E0	kernel32.dll	01BB	GetStdHandle
1	0003C1E4	kernel32.dll	02D2	SetHandleCount
1	0003C1E8	kernel32.dll	00A1	CloseProfileUserMapping
1	0003C1EC	kernel32.dll	016A	GetEnvironmentStrings
1	0003C1F0	kernel32.dll	0076	AddAtomW
1	0003C1F4	kernel32.dll	0130	FreeEnvironmentStringsA
1	0003C1F8	kernel32.dll	0310	UnhandledExceptionFilter
1	0003C1FC	kernel32.dll	01D9	GetTimeZoneInformation
1	0003C200	kernel32.dll	0138	GetACP
1	0003C204	kernel32.dll	0205	HeapSize
1	0003C208	kernel32.dll	0203	HeapReAlloc
1	0003C20C	kernel32.dll	0273	RaiseException
1	0003C210	kernel32.dll	02FD	TerminateProcess
1	0003C214	kernel32.dll	0201	HeapFree
1	0003C218	kernel32.dll	01FD	HeapAlloc
1	0003C21C	kernel32.dll	00F8	ExitProcess
1	0003C220	kernel32.dll	0149	GetCommandLineA
1	0003C224	kernel32.dll	01B9	GetStartupInfoA
1	0003C228	kernel32.dll	0291	RtlUnwind
1	0003C22C	kernel32.dll	01D6	GetTickCount
1	0003C230	kernel32.dll	0111	FileTimeToLocalFileTime
1	0003C234	kernel32.dll	0112	FileTimeToSystemTime
1	0003C238	kernel32.dll	02C9	SetErrorMode
1	0003C23C	kernel32.dll	02FB	SystemTimeToFileTime
1	0003C240	kernel32.dll	0233	LocalFileTimeToFileTime
1	0003C244	kernel32.dll	0177	GetFileSize
1	0003C248	kernel32.dll	0196	GetOEMCP
1	0003C24C	kernel32.dll	013E	GetCPInfo
1	0003C250	kernel32.dll	01AB	GetProcessVersion
1	0003C254	kernel32.dll	0158	GetCurrentDirectoryA
1	0003C258	kernel32.dll	0306	TlsGetValue
1	0003C25C	kernel32.dll	0238	LocalReAlloc
1	0003C260	kernel32.dll	0307	TlsSetValue
1	0003C264	kernel32.dll	00E1	EnterCriticalSection
1	0003C268	kernel32.dll	01F3	GlobalReAlloc
1	0003C26C	kernel32.dll	0228	LeaveCriticalSection
1	0003C270	kernel32.dll	0304	TlsFree
1	0003C274	kernel32.dll	01F0	GlobalHandle
1	0003C278	kernel32.dll	00D6	DeleteCriticalSection
1	0003C27C	kernel32.dll	0302	TlsAlloc
1	0003C280	kernel32.dll	020A	InitializeCriticalSection
1	0003C284	kernel32.dll	01E6	GlobalAlloc
1	0003C288	kernel32.dll	02F5	SizeofResource
1	0003C28C	kernel32.dll	01EC	GlobalFlags
1	0003C290	kernel32.dll	01B7	GetShortPathNameA
1	0003C294	kernel32.dll	01D1	GetThreadLocale
1	0003C298	kernel32.dll	01BD	GetStringTypeExA
1	0003C29C	kernel32.dll	01DF	GetVolumeInformationA
1	0003C2A0	kernel32.dll	011C	FindFirstFileA
1	0003C2A4	kernel32.dll	0118	FindClose
1	0003C2A8	kernel32.dll	00D8	DeleteFileA
1	0003C2AC	kernel32.dll	024D	MoveFileA
1	0003C2B0	kernel32.dll	02C6	SetEndOfFile
1	0003C2B4	kernel32.dll	0312	UnlockFile
1	0003C2B8	kernel32.dll	023C	LockFile
1	0003C2BC	kernel32.dll	0128	FlushFileBuffers
1	0003C2C0	kernel32.dll	02CF	SetFilePointer
1	0003C2C4	kernel32.dll	0336	WriteFile
1	0003C2C8	kernel32.dll	027E	ReadFile
1	0003C2CC	kernel32.dll	00B9	CreateFileA
1	0003C2D0	kernel32.dll	015A	GetCurrentProcess
1	0003C2D4	kernel32.dll	00DE	DuplicateHandle
1	0003C2D8	kernel32.dll	012D	FormatMessageA
1	0003C2DC	kernel32.dll	0235	LocalFree
1	0003C2E0	kernel32.dll	032B	WideCharToMultiByte
1	0003C2E4	kernel32.dll	0210	InterlockedIncrement
1	0003C2E8	kernel32.dll	020D	InterlockedDecrement
1	0003C2EC	kernel32.dll	02D4	SetLastError
1	0003C2F0	kernel32.dll	0251	MulDiv
1	0003C2F4	kernel32.dll	0252	MultiByteToWideChar
1	0003C2F8	kernel32.dll	0181	GetLastError
1	0003C2FC	kernel32.dll	0164	GetDiskFreeSpaceA
1	0003C300	kernel32.dll	0178	GetFileTime
1	0003C304	kernel32.dll	02D0	SetFileTime
1	0003C308	kernel32.dll	017A	GetFullPathNameA
1	0003C30C	kernel32.dll	01CC	GetTempFileNameA
1	0003C310	kernel32.dll	035C	lstrcpyn
1	0003C314	kernel32.dll	0172	GetFileAttributesA
1	0003C318	kernel32.dll	0229	LoadLibraryA
1	0003C31C	kernel32.dll	0133	FreeLibrary
1	0003C320	kernel32.dll	01DC	GetVersion
1	0003C324	kernel32.dll	0350	lstrcat
1	0003C328	kernel32.dll	01EE	GlobalGetAtomNameA
1	0003C32C	kernel32.dll	01E9	GlobalFindAtomA
1	0003C330	kernel32.dll	0359	lstrcpy
1	0003C334	kernel32.dll	018D	GetModuleHandleA
1	0003C338	kernel32.dll	01A3	GetProcAddress
1	0003C33C	kernel32.dll	035F	lstrlen