📄 it.txt
字号:
; Syntax for each function in a thunk (the separator is a TAB)
; ------------------------------------------------------------
; Flag RVA ModuleName Ordinal Name
;
; Details for <Valid> parameter:
; ------------------------------
; Flag: 0 = valid: no -> - Name contains the address of the redirected API (you can set
; it to zero if you edit it).
; - Ordinal is not considered but you should let '0000' as value.
; - ModuleName is not considered but you should let '?' as value.
;
; 1 = valid: yes -> All next parameters on the line will be considered.
; Function imported by ordinal must have no name (the 4th TAB must
; be there though).
;
; 2 = Equivalent to 0 but it is for the loader.
;
; 3 = Equivalent to 1 but it is for the loader.
;
; And finally, edit this file as your own risk! :-)
Target: e:\edrlib.dll
OEP: 000011C9 IATRVA: 00004000 IATSize: 000000CC
FThunk: 00004000 NbFunc: 00000004
1 00004000 gdi32.dll 0178 GetTextExtentPoint32W
1 00004004 gdi32.dll 020E TextOutW
1 00004008 gdi32.dll 020D TextOutA
1 0000400C gdi32.dll 0177 GetTextExtentPoint32A
FThunk: 00004014 NbFunc: 0000002D
1 00004014 kernel32.dll 033A lstrlenW
1 00004018 kernel32.dll 00C6 FreeEnvironmentStringsW
1 0000401C kernel32.dll 00DE GetCommandLineA
1 00004020 kernel32.dll 0192 GetVersion
1 00004024 kernel32.dll 0090 ExitProcess
1 00004028 kernel32.dll 02CF TerminateProcess
1 0000402C kernel32.dll 010D GetCurrentProcess
1 00004030 kernel32.dll 0110 GetCurrentThreadId
1 00004034 kernel32.dll 02D7 TlsSetValue
1 00004038 kernel32.dll 02D4 TlsAlloc
1 0000403C kernel32.dll 02D5 TlsFree
1 00004040 kernel32.dll 02D6 TlsGetValue
1 00004044 kernel32.dll 01F6 LockResource
1 00004048 kernel32.dll 016C GetStdHandle
1 0000404C kernel32.dll 012C GetFileType
1 00004050 kernel32.dll 016A GetStartupInfoA
1 00004054 kernel32.dll 005E DeleteCriticalSection
1 00004058 kernel32.dll 013C GetModuleFileNameA
1 0000405C kernel32.dll 00C5 FreeEnvironmentStringsA
1 00004060 kernel32.dll 0338 lstrlen
1 00004064 kernel32.dll 0305 WideCharToMultiByte
1 00004068 kernel32.dll 011D GetEnvironmentStrings
1 0000406C kernel32.dll 011F GetEnvironmentStringsW
1 00004070 kernel32.dll 01BC HeapDestroy
1 00004074 kernel32.dll 01BA HeapCreate
1 00004078 kernel32.dll 02F5 VirtualFree
1 0000407C kernel32.dll 01BE HeapFree
1 00004080 kernel32.dll 0312 WriteFile
1 00004084 kernel32.dll 01C9 InitializeCriticalSection
1 00004088 kernel32.dll 0073 EnterCriticalSection
1 0000408C kernel32.dll 01E2 LeaveCriticalSection
1 00004090 kernel32.dll 01B8 HeapAlloc
1 00004094 kernel32.dll 00D3 GetCPInfo
1 00004098 kernel32.dll 00CD GetACP
1 0000409C kernel32.dll 014A GetOEMCP
1 000040A0 kernel32.dll 02F2 VirtualAlloc
1 000040A4 kernel32.dll 01C1 HeapReAlloc
1 000040A8 kernel32.dll 0157 GetProcAddress
1 000040AC kernel32.dll 01E3 LoadLibraryA
1 000040B0 kernel32.dll 0206 MultiByteToWideChar
1 000040B4 kernel32.dll 01E0 LCMapStringA
1 000040B8 kernel32.dll 01E1 LCMapStringW
1 000040BC kernel32.dll 016D GetStringTypeA
1 000040C0 kernel32.dll 0170 GetStringTypeW
1 000040C4 kernel32.dll 025B RtlUnwind
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -