📄 iat.txt
字号:
; Syntax for each function in a thunk (the separator is a TAB)
; ------------------------------------------------------------
; Flag RVA ModuleName Ordinal Name
;
; Details for <Valid> parameter:
; ------------------------------
; Flag: 0 = valid: no -> - Name contains the address of the redirected API (you can set
; it to zero if you edit it).
; - Ordinal is not considered but you should let '0000' as value.
; - ModuleName is not considered but you should let '?' as value.
;
; 1 = valid: yes -> All next parameters on the line will be considered.
; Function imported by ordinal must have no name (the 4th TAB must
; be there though).
;
; 2 = Equivalent to 0 but it is for the loader.
;
; 3 = Equivalent to 1 but it is for the loader.
;
; And finally, edit this file as your own risk! :-)
Target: D:\notepad.exe
OEP: 000010CC IATRVA: 000062E0 IATSize: 00000248
FThunk: 000062E4 NbFunc: 00000005
1 000062E4 advapi32.dll 01AD RegQueryValueExA
1 000062E8 advapi32.dll 018A RegCloseKey
1 000062EC advapi32.dll 01B8 RegSetValueExA
1 000062F0 advapi32.dll 01A2 RegOpenKeyA
1 000062F4 advapi32.dll 018D RegCreateKeyA
FThunk: 000062FC NbFunc: 00000017
1 000062FC gdi32.dll 0158 GetObjectA
1 00006300 gdi32.dll 012E GetDeviceCaps
1 00006304 gdi32.dll 0039 CreateFontIndirectA
1 00006308 gdi32.dll 01CF SelectObject
1 0000630C gdi32.dll 0001 AbortDoc
1 00006310 gdi32.dll 005C EndDoc
1 00006314 gdi32.dll 0052 DeleteDC
1 00006318 gdi32.dll 0207 StartPage
1 0000631C gdi32.dll 0204 StartDocA
1 00006320 gdi32.dll 005E EndPage
1 00006324 gdi32.dll 0179 GetTextExtentPointA
1 00006328 gdi32.dll 0038 CreateFontA
1 0000632C gdi32.dll 01D1 SetAbortProc
1 00006330 gdi32.dll 01D6 SetBkMode
1 00006334 gdi32.dll 01EA SetMapMode
1 00006338 gdi32.dll 017F GetTextMetricsA
1 0000633C gdi32.dll 0201 SetWindowExtEx
1 00006340 gdi32.dll 01FD SetViewportExtEx
1 00006344 gdi32.dll 018C LPtoDP
1 00006348 gdi32.dll 002D CreateDCA
1 0000634C gdi32.dll 0170 GetTextCharset
1 00006350 gdi32.dll 0055 DeleteObject
1 00006354 gdi32.dll 0168 GetStockObject
FThunk: 0000635C NbFunc: 00000026
1 0000635C kernel32.dll 0322 _hwrite
1 00006360 kernel32.dll 0060 DeleteFileA
1 00006364 kernel32.dll 0323 _lclose
1 00006368 kernel32.dll 0326 _lopen
1 0000636C kernel32.dll 01F3 LocalUnlock
1 00006370 kernel32.dll 0324 _lcreat
1 00006374 kernel32.dll 0325 _llseek
1 00006378 kernel32.dll 01F0 LocalReAlloc
1 0000637C kernel32.dll 01E9 LocalAlloc
1 00006380 kernel32.dll 01EF LocalLock
1 00006384 kernel32.dll 01A0 GlobalAlloc
1 00006388 kernel32.dll 0133 GetLocalTime
1 0000638C kernel32.dll 018B GetTimeFormatA
1 00006390 kernel32.dll 0111 GetDateFormatA
1 00006394 kernel32.dll 032F lstrcmpi
1 00006398 kernel32.dll 016A GetStartupInfoA
1 0000639C kernel32.dll 013E GetModuleHandleA
1 000063A0 kernel32.dll 0090 ExitProcess
1 000063A4 kernel32.dll 0338 lstrlen
1 000063A8 kernel32.dll 0335 lstrcpyn
1 000063AC kernel32.dll 025A RtlMoveMemory
1 000063B0 kernel32.dll 032C lstrcmp
1 000063B4 kernel32.dll 01D8 IsDBCSLeadByte
1 000063B8 kernel32.dll 0165 GetProfileStringA
1 000063BC kernel32.dll 0329 lstrcat
1 000063C0 kernel32.dll 00A7 FindFirstFileA
1 000063C4 kernel32.dll 00A3 FindClose
1 000063C8 kernel32.dll 0205 MulDiv
1 000063CC kernel32.dll 0131 GetLastError
1 000063D0 kernel32.dll 0039 CreateFileA
1 000063D4 kernel32.dll 01A7 GlobalFree
1 000063D8 kernel32.dll 0332 lstrcpy
1 000063DC kernel32.dll 0134 GetLocaleInfoA
1 000063E0 kernel32.dll 01ED LocalFree
1 000063E4 kernel32.dll 00DE GetCommandLineA
1 000063E8 kernel32.dll 01B2 GlobalUnlock
1 000063EC kernel32.dll 0321 _hread
1 000063F0 kernel32.dll 01AB GlobalLock
FThunk: 000063F8 NbFunc: 00000006
1 000063F8 shell32.dll 00F6 DragFinish
1 000063FC shell32.dll 016C ShellAboutA
1 00006400 shell32.dll 0171 ShellExecuteA
1 00006404 shell32.dll 00F5 DragAcceptFiles
1 00006408 shell32.dll 014C SHGetSpecialFolderPathA
1 0000640C shell32.dll 00F7 DragQueryFile
FThunk: 00006414 NbFunc: 0000003C
1 00006414 user32.dll 02B4 wsprintfA
1 00006418 user32.dll 003E CloseClipboard
1 0000641C user32.dll 018B IsClipboardFormatAvailable
1 00006420 user32.dll 01D9 OpenClipboard
1 00006424 user32.dll 0120 GetMenu
1 00006428 user32.dll 01B0 LoadStringA
1 0000642C user32.dll 019B LoadAcceleratorsA
1 00006430 user32.dll 0149 GetSystemMenu
1 00006434 user32.dll 01FB RegisterClipboardFormatA
1 00006438 user32.dll 025E SetWindowLongA
1 0000643C user32.dll 005B CreateWindowExA
1 00006440 user32.dll 019F LoadCursorA
1 00006444 user32.dll 01F8 RegisterClassExA
1 00006448 user32.dll 014A GetSystemMetrics
1 0000644C user32.dll 0297 UpdateWindow
1 00006450 user32.dll 0029 CharPrevA
1 00006454 user32.dll 00F4 GetClientRect
1 00006458 user32.dll 01E2 PeekMessageA
1 0000645C user32.dll 0231 SetDlgItemTextA
1 00006460 user32.dll 0279 TabbedTextOutA
1 00006464 user32.dll 0051 CreateDialogParamA
1 00006468 user32.dll 00BA EnableWindow
1 0000646C user32.dll 0163 GetWindowTextA
1 00006470 user32.dll 0214 SendDlgItemMessageA
1 00006474 user32.dll 0105 GetDlgCtrlID
1 00006478 user32.dll 0038 ChildWindowFromPoint
1 0000647C user32.dll 020F ScreenToClient
1 00006480 user32.dll 0100 GetCursorPos
1 00006484 user32.dll 0108 GetDlgItemTextA
1 00006488 user32.dll 0146 GetSubMenu
1 0000648C user32.dll 0035 CheckMenuItem
1 00006490 user32.dll 0264 SetWindowTextA
1 00006494 user32.dll 018C IsDialogMessage
1 00006498 user32.dll 0288 TranslateMessage
1 0000649C user32.dll 0098 DispatchMessageA
1 000064A0 user32.dll 012E GetMessageA
1 000064A4 user32.dll 0091 DestroyWindow
1 000064A8 user32.dll 01C3 MessageBeep
1 000064AC user32.dll 01C4 MessageBoxA
1 000064B0 user32.dll 0087 DefWindowProcA
1 000064B4 user32.dll 00B8 EnableMenuItem
1 000064B8 user32.dll 011D GetLastActivePopup
1 000064BC user32.dll 0270 ShowWindow
1 000064C0 user32.dll 00BC EndDialog
1 000064C4 user32.dll 0235 SetForegroundWindow
1 000064C8 user32.dll 02AE WinHelpA
1 000064CC user32.dll 01A3 LoadIconA
1 000064D0 user32.dll 0101 GetDC
1 000064D4 user32.dll 0208 ReleaseDC
1 000064D8 user32.dll 022B SetCursor
1 000064DC user32.dll 0219 SendMessageA
1 000064E0 user32.dll 010B GetFocus
1 000064E4 user32.dll 01E4 PostMessageA
1 000064E8 user32.dll 0234 SetFocus
1 000064EC user32.dll 017F InvalidateRect
1 000064F0 user32.dll 01CF MoveWindow
1 000064F4 user32.dll 0026 CharNextA
1 000064F8 user32.dll 0191 IsIconic
1 000064FC user32.dll 01E6 PostQuitMessage
1 00006500 user32.dll 0284 TranslateAccelerator
FThunk: 00006508 NbFunc: 00000007
1 00006508 comdlg32.dll 006E GetOpenFileNameA
1 0000650C comdlg32.dll 0067 ChooseFontA
1 00006510 comdlg32.dll 006A FindTextA
1 00006514 comdlg32.dll 0073 PageSetupDlgA
1 00006518 comdlg32.dll 0070 GetSaveFileNameA
1 0000651C comdlg32.dll 0069 CommDlgExtendedError
1 00006520 comdlg32.dll 006C GetFileTitleA
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -