一个vmp3.2-3.5加壳后的程序，应该是e语言写的，网上找了个vmp脱壳机，命令行提示数据如下，Entry Point Address: 004A5360
IAT LoadStringA: 004BBC53 APIaddress: 761A4BF0
IAT WINMM.dll midiStreamOut 0094B6A4 APIaddress: 70DDF2D0
IAT WINMM.dll midiOutPrepareHeader 0094B6A4 APIaddress: 70DDF1F0
IAT WINMM.dll waveOutWrite 0094B6A4 APIaddress: 70DDFD90
IAT WINMM.dll waveOutPause 0094B6A4 APIaddress: 70DDFC90
IAT WINMM.dll waveOutReset 0094B6A4 APIaddress: 70DDFCD0
IAT WINMM.dll waveOutClose 0094B6A4 APIaddress: 70DDFB00
IAT WINMM.dll waveOutGetNumDevs 0094B6A4 APIaddress: 70DDFBC0
IAT WINMM.dll waveOutOpen 0094B6A4 APIaddress: 70DDFC70
IAT WINMM.dll midiOutUnprepareHeader 0094B6A4 APIaddress: 70DDF270
IAT WINMM.dll midiStreamOpen 0094B6A4 APIaddress: 70DDF2B0
IAT WINMM.dll midiStreamProperty 0094B6A4 APIaddress: 70DDF330
IAT WINMM.dll midiStreamStop 0094B6A4 APIaddress: 70DDF370
IAT WINMM.dll midiOutReset 0094B6A4 APIaddress: 70DDF210
IAT WINMM.dll midiStreamClose 0094B6A4 APIaddress: 70DDF290
IAT WINMM.dll midiStreamRestart 0094B6A4 APIaddress: 70DDF350
IAT WINMM.dll waveOutUnprepareHeader 0094B6A4 APIaddress: 70DDFD70
IAT WINMM.dll waveOutPrepareHeader 0094B6A4 APIaddress: 70DDFCB0
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT WS2_32.dll 0094B6EC APIaddress: 00000000
IAT VERSION.dll VerLanguageNameA 0094B714 APIaddress: 76E94F50
IAT VERSION.dll GetFileVersionInfoSizeA 0094B714 APIaddress: 74D81520
IAT VERSION.dll GetFileVersionInfoA 0094B714 APIaddress: 74D81500
IAT VERSION.dll VerQueryValueA 0094B714 APIaddress: 74D81540
IAT KERNEL32.dll WideCharToMultiByte 0094B728 APIaddress: 76E7E290
IAT KERNEL32.dll InterlockedIncrement 0094B728 APIaddress: 76E7EA80
IAT KERNEL32.dll InterlockedDecrement 0094B728 APIaddress: 76E7EB00
IAT KERNEL32.dll GetSystemInfo 0094B728 APIaddress: 76E81BB0
IAT KERNEL32.dll IsProcessorFeaturePresent 0094B728 APIaddress: 76E80E10
IAT KERNEL32.dll lstrcmpiA 0094B728 APIaddress: 76E7EAA0
IAT KERNEL32.dll FreeEnvironmentStringsW 0094B728 APIaddress: 76E81E40
IAT KERNEL32.dll FreeEnvironmentStringsA 0094B728 APIaddress: 76E93290
IAT KERNEL32.dll UnhandledExceptionFilter 0094B728 APIaddress: 76E94F00
IAT KERNEL32.dll GetVersion 0094B728 APIaddress: 76E81C10
IAT KERNEL32.dll HeapSize 0094B728 APIaddress: 7708B910
IAT KERNEL32.dll RaiseException 0094B728 APIaddress: 76E80850
IAT KERNEL32.dll GetLocalTime 0094B728 APIaddress: 76E80E00
IAT KERNEL32.dll GetSystemTime 0094B728 APIaddress: 76E81900
IAT KERNEL32.dll RtlUnwind 0094B728 APIaddress: 76E80860
IAT KERNEL32.dll GetStartupInfoA 0094B728 APIaddress: 76E80F20
IAT KERNEL32.dll GetOEMCP 0094B728 APIaddress: 76E82430
IAT KERNEL32.dll GetCPInfo 0094B728 APIaddress: 76E817D0
IAT KERNEL32.dll GetProcessVersion 0094B728 APIaddress: 76E78B00
IAT KERNEL32.dll SetErrorMode 0094B728 APIaddress: 76E808B0
IAT KERNEL32.dll GlobalFlags 0094B728 APIaddress: 76E78560
IAT KERNEL32.dll GetCurrentThread 0094B728 APIaddress: 76E7EA50
IAT KERNEL32.dll GetFileTime 0094B728 APIaddress: 76E83620
IAT KERNEL32.dll TlsGetValue 0094B728 APIaddress: 76E7E1C0
IAT KERNEL32.dll LocalReAlloc 0094B728 APIaddress: 76E78B40
IAT KERNEL32.dll TlsSetValue 0094B728 APIaddress: 76E7E250
IAT KERNEL32.dll TlsFree 0094B728 APIaddress: 76E81210
IAT KERNEL32.dll GlobalHandle 0094B728 APIaddress: 76E77DE0
IAT KERNEL32.dll TlsAlloc 0094B728 APIaddress: 76E813E0
IAT KERNEL32.dll LocalAlloc 0094B728 APIaddress: 76E80700
IAT KERNEL32.dll lstrcmpA 0094B728 APIaddress: 76E7F780
IAT KERNEL32.dll GlobalGetAtomNameA 0094B728 APIaddress: 76EB2060
IAT KERNEL32.dll GlobalAddAtomA 0094B728 APIaddress: 76E7B7B0
IAT KERNEL32.dll GlobalFindAtomA 0094B728 APIaddress: 76E761F0
IAT KERNEL32.dll GlobalDeleteAtom 0094B728 APIaddress: 76E81130
IAT KERNEL32.dll SetEndOfFile 0094B728 APIaddress: 76E837B0
IAT KERNEL32.dll UnlockFile 0094B728 APIaddress: 76E83830
IAT KERNEL32.dll LockFile 0094B728 APIaddress: 76E83730
IAT KERNEL32.dll FlushFileBuffers 0094B728 APIaddress: 76E83540
IAT KERNEL32.dll DuplicateHandle 0094B728 APIaddress: 76E83190
IAT KERNEL32.dll lstrcpynA 0094B728 APIaddress: 76E79300
IAT KERNEL32.dll FileTimeToLocalFileTime 0094B728 APIaddress: 76E83430
IAT KERNEL32.dll FileTimeToSystemTime 0094B728 APIaddress: 76E838C0
IAT KERNEL32.dll LocalFree 0094B728 APIaddress: 76E7F7D0
IAT KERNEL32.dll GetTimeZoneInformation 0094B728 APIaddress: 76E81F60
IAT KERNEL32.dll SetLastError 0094B728 APIaddress: 76E7E240
IAT KERNEL32.dll MultiByteToWideChar 0094B728 APIaddress: 76E7E220
IAT KERNEL32.dll GetSystemDirectoryA 0094B728 APIaddress: 76E78480
IAT KERNEL32.dll TerminateProcess 0094B728 APIaddress: 76E79910
IAT KERNEL32.dll GetCurrentProcess 0094B728 APIaddress: 76E83120
IAT KERNEL32.dll GetFileSize 0094B728 APIaddress: 76E83600
IAT KERNEL32.dll SetFilePointer 0094B728 APIaddress: 76E837F0
IAT KERNEL32.dll CreateSemaphoreA 0094B728 APIaddress: 76E76230
IAT KERNEL32.dll ResumeThread 0094B728 APIaddress: 76E81B90
IAT KERNEL32.dll ReleaseSemaphore 0094B728 APIaddress: 76E83300
IAT KERNEL32.dll EnterCriticalSection 0094B728 APIaddress: 7706FF80
IAT KERNEL32.dll LeaveCriticalSection 0094B728 APIaddress: 7706E7F0
IAT KERNEL32.dll GetProfileStringA 0094B728 APIaddress: 76E79170
IAT KERNEL32.dll WriteFile 0094B728 APIaddress: 76E83850
IAT KERNEL32.dll WaitForMultipleObjects 0094B728 APIaddress: 76E83350
IAT KERNEL32.dll CreateFileA 0094B728 APIaddress: 76E833D0
IAT KERNEL32.dll SetEvent 0094B728 APIaddress: 76E83320
IAT KERNEL32.dll FindResourceA 0094B728 APIaddress: 76E72EB0
IAT KERNEL32.dll LoadResource 0094B728 APIaddress: 76E7EAE0
IAT KERNEL32.dll LockResource 0094B728 APIaddress: 76E7F5E0
IAT KERNEL32.dll ReadFile 0094B728 APIaddress: 76E83760
IAT KERNEL32.dll GetModuleFileNameA 0094B728 APIaddress: 76E810D0
IAT KERNEL32.dll InterlockedExchange 0094B728 APIaddress: 76E72E40
IAT KERNEL32.dll GetCurrentThreadId 0094B728 APIaddress: 76E7E1B0
IAT KERNEL32.dll ExitProcess 0094B728 APIaddress: 76E84650
IAT KERNEL32.dll GlobalSize 0094B728 APIaddress: 76E80780
IAT KERNEL32.dll GlobalFree 0094B728 APIaddress: 76E80260
IAT KERNEL32.dll DeleteCriticalSection 0094B728 APIaddress: 7705FC40
IAT KERNEL32.dll InitializeCriticalSection 0094B728 APIaddress: 7708C3B0
IAT KERNEL32.dll lstrcatA 0094B728 APIaddress: 76E78A60
IAT KERNEL32.dll lstrlenA 0094B728 APIaddress: 76E806E0
IAT KERNEL32.dll WinExec 0094B728 APIaddress: 76EBCF20
IAT KERNEL32.dll lstrcpyA 0094B728 APIaddress: 76E783C0
IAT KERNEL32.dll FindNextFileA 0094B728 APIaddress: 76E834F0
IAT KERNEL32.dll GlobalReAlloc 0094B728 APIaddress: 76E7F440
IAT KERNEL32.dll HeapFree 0094B728 APIaddress: 76E7E200
IAT KERNEL32.dll HeapReAlloc 0094B728 APIaddress: 770727B0
IAT KERNEL32.dll GetProcessHeap 0094B728 APIaddress: 76E7F620
IAT KERNEL32.dll HeapAlloc 0094B728 APIaddress: 77075E30
IAT KERNEL32.dll GetFullPathNameA 0094B728 APIaddress: 76E83660
IAT KERNEL32.dll FreeLibrary 0094B728 APIaddress: 76E80D80
IAT KERNEL32.dll LoadLibraryA 0094B728 APIaddress: 76E80E70
IAT KERNEL32.dll GetLastError 0094B728 APIaddress: 76E7E2B0
IAT KERNEL32.dll GetVersionExA 0094B728 APIaddress: 76E81A00
IAT KERNEL32.dll WritePrivateProfileStringA 0094B728 APIaddress: 76E78DA0
IAT KERNEL32.dll GetPrivateProfileStringA 0094B728 APIaddress: 76E7B7D0
IAT KERNEL32.dll CreateThread 0094B728 APIaddress: 76E811B0
IAT KERNEL32.dll CreateEventA 0094B728 APIaddress: 76E831D0
IAT KERNEL32.dll Sleep 0094B728 APIaddress: 76E811A0
IAT KERNEL32.dll GlobalAlloc 0094B728 APIaddress: 76E80890
IAT KERNEL32.dll GlobalLock 0094B728 APIaddress: 76E7E420
IAT KERNEL32.dll GlobalUnlock 0094B728 APIaddress: 76E7E370
IAT KERNEL32.dll FindFirstFileA 0094B728 APIaddress: 76E83480
IAT KERNEL32.dll FindClose 0094B728 APIaddress: 76E83440
IAT KERNEL32.dll GetFileAttributesA 0094B728 APIaddress: 76E835B0
IAT KERNEL32.dll DeleteFileA 0094B728 APIaddress: 76E83400
IAT KERNEL32.dll CreateDirectoryA 0094B728 APIaddress: 76E833A0
IAT KERNEL32.dll SetCurrentDirectoryA 0094B728 APIaddress: 76E94AE0
IAT KERNEL32.dll GetVolumeInformationA 0094B728 APIaddress: 76E836D0
IAT KERNEL32.dll GetModuleHandleA 0094B728 APIaddress: 76E80D00
IAT KERNEL32.dll GetProcAddress 0094B728 APIaddress: 76E7F7F0
IAT KERNEL32.dll MulDiv 0094B728 APIaddress: 76E82FD0
IAT KERNEL32.dll GetCommandLineA 0094B728 APIaddress: 76E82180
IAT KERNEL32.dll GetTickCount 0094B728 APIaddress: 76E82640
IAT KERNEL32.dll CreateProcessA 0094B728 APIaddress: 76E92D70
IAT KERNEL32.dll WaitForSingleObject 0094B728 APIaddress: 76E83370
IAT KERNEL32.dll CloseHandle 0094B728 APIaddress: 76E83180
IAT KERNEL32.dll GetEnvironmentStrings 0094B728 APIaddress: 76E93520
IAT KERNEL32.dll GetEnvironmentStringsW 0094B728 APIaddress: 76E82190
IAT KERNEL32.dll SetHandleCount 0094B728 APIaddress: 76E82230
IAT KERNEL32.dll GetStdHandle 0094B728 APIaddress: 76E819A0
IAT KERNEL32.dll GetFileType 0094B728 APIaddress: 76E83630
IAT KERNEL32.dll GetEnvironmentVariableA 0094B728 APIaddress: 76E78990
IAT KERNEL32.dll HeapDestroy 0094B728 APIaddress: 76E80E90
IAT KERNEL32.dll HeapCreate 0094B728 APIaddress: 76E80CE0
IAT KERNEL32.dll VirtualFree 0094B728 APIaddress: 76E7F760
IAT KERNEL32.dll SetEnvironmentVariableA 0094B728 APIaddress: 76E94B40
IAT KERNEL32.dll LCMapStringA 0094B728 APIaddress: 76E798B0
IAT KERNEL32.dll LCMapStringW 0094B728 APIaddress: 76E81110
IAT KERNEL32.dll VirtualAlloc 0094B728 APIaddress: 76E7F660
IAT KERNEL32.dll IsBadWritePtr 0094B728 APIaddress: 76E70010
IAT KERNEL32.dll SetUnhandledExceptionFilter 0094B728 APIaddress: 76E819C0
IAT KERNEL32.dll GetStringTypeA 0094B728 APIaddress: 76E798D0
IAT KERNEL32.dll GetStringTypeW 0094B728 APIaddress: 76E80EE0
IAT KERNEL32.dll CompareStringA 0094B728 APIaddress: 76E77D40
IAT KERNEL32.dll CompareStringW 0094B728 APIaddress: 76E7E270
IAT KERNEL32.dll IsBadReadPtr 0094B728 APIaddress: 76E70100
IAT KERNEL32.dll IsBadCodePtr 0094B728 APIaddress: 76E700E0
IAT KERNEL32.dll SetStdHandle 0094B728 APIaddress: 76E94CA0
IAT KERNEL32.dll GetACP 0094B728 APIaddress: 76E80660
IAT USER32.dll IsZoomed 0094B948 APIaddress: 76C05E80
IAT USER32.dll GetClassInfoA 0094B948 APIaddress: 76BF5F30
IAT USER32.dll GetSysColorBrush 0094B948 APIaddress: 76C10520
IAT USER32.dll ShowWindow 0094B948 APIaddress: 76C13150
IAT USER32.dll SystemParametersInfoA 0094B948 APIaddress: 76BF8350
IAT USER32.dll LoadImageA 0094B948 APIaddress: 76BFABE0
IAT USER32.dll EnumDisplaySettingsA 0094B948 APIaddress: 76BF93D0
IAT USER32.dll ClientToScreen 0094B948 APIaddress: 76BF48B0
IAT USER32.dll EnableMenuItem 0094B948 APIaddress: 76BF0990
IAT USER32.dll GetSubMenu 0094B948 APIaddress: 76BF2170
IAT USER32.dll GetDlgCtrlID 0094B948 APIaddress: 76C09980
IAT USER32.dll CreateAcceleratorTableA 0094B948 APIaddress: 76C30040
IAT USER32.dll CreateMenu 0094B948 APIaddress: 76BFBEF0
IAT USER32.dll ModifyMenuA 0094B948 APIaddress: 76C65590
IAT USER32.dll AppendMenuA 0094B948 APIaddress: 76C651D0
IAT USER32.dll CreatePopupMenu 0094B948 APIaddress: 76BFC220
IAT USER32.dll DrawIconEx 0094B948 APIaddress: 76BF5B50
IAT USER32.dll CreateIconFromResource 0094B948 APIaddress: 76C30200
IAT USER32.dll CreateIconFromResourceEx 0094B948 APIaddress: 76BF5100
IAT USER32.dll RegisterClipboardFormatA 0094B948 APIaddress: 76C0F0E0
IAT USER32.dll SetRectEmpty 0094B948 APIaddress: 76C0FA30
IAT USER32.dll DispatchMessageA 0094B948 APIaddress: 76BF8330
IAT USER32.dll GetMessageA 0094B948 APIaddress: 76BF4000
IAT USER32.dll WindowFromPoint 0094B948 APIaddress: 76C132F0
IAT USER32.dll DrawFocusRect 0094B948 APIaddress: 76BF77E0
IAT USER32.dll DefWindowProcA 0094B948 APIaddress: 770B8030
IAT USER32.dll GetSystemMenu 0094B948 APIaddress: 76C125E0
IAT USER32.dll DeleteMenu 0094B948 APIaddress: 76C11F90
IAT USER32.dll GetMenu 0094B948 APIaddress: 76C04D90
IAT USER32.dll SetMenu 0094B948 APIaddress: 76BFBFB0
IAT USER32.dll PeekMessageA 0094B948 APIaddress: 76BF0360
IAT USER32.dll IsIconic 0094B948 APIaddress: 76C06080
IAT USER32.dll SetFocus 0094B948 APIaddress: 76C12EE0
IAT USER32.dll GetActiveWindow 0094B948 APIaddress: 76BF8580
IAT USER32.dll GetWindow 0094B948 APIaddress: 76C0C7C0
IAT USER32.dll DrawEdge 0094B948 APIaddress: 76BF28F0
IAT USER32.dll SetWindowRgn 0094B948 APIaddress: 76BF5D20
IAT USER32.dll GetMessagePos 0094B948 APIaddress: 76C10F80
IAT USER32.dll ScreenToClient 0094B948 APIaddress: 76C09710
IAT USER32.dll ChildWindowFromPointEx 0094B948 APIaddress: 76C11E50
IAT USER32.dll CopyRect 0094B948 APIaddress: 76C0CB90
IAT USER32.dll LoadBitmapA 0094B948 APIaddress: 76BFBA50
IAT USER32.dll WinHelpA 0094B948 APIaddress: 76BFB560
IAT USER32.dll KillTimer 0094B948 APIaddress: 76C12900
IAT USER32.dll SetTimer 0094B948 APIaddress: 76C0F680
IAT USER32.dll ReleaseCapture 0094B948 APIaddress: 76BF9180
IAT USER32.dll GetCapture 0094B948 APIaddress: 76C0FBC0
IAT USER32.dll SetCapture 0094B948 APIaddress: 76C12DE0
IAT USER32.dll GetScrollRange 0094B948 APIaddress: 76BF9370
IAT USER32.dll LoadStringA 0094B948 APIaddress: 76BF5640
IAT USER32.dll GetMenuCheckMarkDimensions 0094B948 APIaddress: 76C4F810
IAT USER32.dll GetMenuState 0094B948 APIaddress: 76BF1810
IAT USER32.dll SetMenuItemBitmaps 0094B948 APIaddress: 76C4F8E0
IAT USER32.dll SetScrollRange 0094B948 APIaddress: 76BED690
IAT USER32.dll PostQuitMessage 0094B948 APIaddress: 76C11390
IAT USER32.dll SetRect 0094B948 APIaddress: 76C0F510
IAT USER32.dll InflateRect 0094B948 APIaddress: 76BFE030
IAT USER32.dll IntersectRect 0094B948 APIaddress: 76C00CF0
IAT USER32.dll DestroyIcon 0094B948 APIaddress: 76C10B70
IAT USER32.dll PtInRect 0094B948 APIaddress: 76BF4870
IAT USER32.dll OffsetRect 0094B948 APIaddress: 76C0B0C0
IAT USER32.dll IsWindowVisible 0094B948 APIaddress: 76C05D80
IAT USER32.dll EnableWindow 0094B948 APIaddress: 76C109B0
IAT USER32.dll RedrawWindow 0094B948 APIaddress: 76C12C10
IAT USER32.dll GetWindowLongA 0094B948 APIaddress: 76C055B0
IAT USER32.dll SetWindowLongA 0094B948 APIaddress: 76BF8590
IAT USER32.dll GetSysColor 0094B948 APIaddress: 76BFD590
IAT USER32.dll SetActiveWindow 0094B948 APIaddress: 76C12D90
IAT USER32.dll SetCursorPos 0094B948 APIaddress: 76C12E60
IAT USER32.dll LoadCursorA 0094B948 APIaddress: 76C10E50
IAT USER32.dll SetCursor 0094B948 APIaddress: 76C119DC
IAT USER32.dll GetDC 0094B948 APIaddress: 76C0F700
IAT USER32.dll FillRect 0094B948 APIaddress: 76BF3770
IAT USER32.dll IsRectEmpty 0094B948 APIaddress: 76C0F070
IAT USER32.dll ReleaseDC 0094B948 APIaddress: 76C0F0A0
IAT USER32.dll IsChild 0094B948 APIaddress: 76C08000
IAT USER32.dll DestroyMenu 0094B948 APIaddress: 76C11FE0
IAT USER32.dll SetForegroundWindow 0094B948 APIaddress: 76C11200
IAT USER32.dll GetWindowRect 0094B948 APIaddress: 76C05380
IAT USER32.dll EqualRect 0094B948 APIaddress: 76C0F4D0
IAT USER32.dll UpdateWindow 0094B948 APIaddress: 76C04E20
IAT USER32.dll ValIDAteRect 0094B948 APIaddress: 76C13290
IAT USER32.dll InvalidateRect 0094B948 APIaddress: 76C12840
IAT USER32.dll GetClientRect 0094B948 APIaddress: 76C05600
IAT USER32.dll GetFocus 0094B948 APIaddress: 76C0F670
IAT USER32.dll GetParent 0094B948 APIaddress: 76C08360
IAT USER32.dll GetTopWindow 0094B948 APIaddress: 76BF0260
IAT USER32.dll PostMessageA 0094B948 APIaddress: 76BF3EB0
IAT USER32.dll IsWindow 0094B948 APIaddress: 76C0AB80
IAT USER32.dll SetParent 0094B948 APIaddress: 76C110E0
IAT USER32.dll DestroyCursor 0094B948 APIaddress: 76C10B70
IAT USER32.dll SendMessageA 0094B948 APIaddress: 76BF4750
IAT USER32.dll SetWindowPos 0094B948 APIaddress: 76C130F0
IAT USER32.dll MessageBoxA 0094B948 APIaddress: 76C51940
IAT USER32.dll GetCursorPos 0094B948 APIaddress: 76BF5C10
IAT USER32.dll GetSystemMetrics 0094B948 APIaddress: 76C05260
IAT USER32.dll EmptyClipboard 0094B948 APIaddress: 76BFC230
IAT USER32.dll SetClipboardData 0094B948 APIaddress: 76BF8700
IAT USER32.dll OpenClipboard 0094B948 APIaddress: 76BF9710
IAT USER32.dll GetClipboardData 0094B948 APIaddress: 76BF85B0
IAT USER32.dll CloseClipboard 0094B948 APIaddress: 76BFB770
IAT USER32.dll wsprintfA 0094B948 APIaddress: 76BF8CB0
IAT USER32.dll WaitForInputIdle 0094B948 APIaddress: 76C62180
IAT USER32.dll DrawFrameControl 0094B948 APIaddress: 76BF8FC0
IAT USER32.dll LoadIconA 0094B948 APIaddress: 76BF9CB0
IAT USER32.dll GetDesktopWindow 0094B948 APIaddress: 76C0A810
IAT USER32.dll GetClassNameA 0094B948 APIaddress: 76BF4540
IAT USER32.dll GetDlgItem 0094B948 APIaddress: 76C09AE0
IAT USER32.dll GetWindowTextA 0094B948 APIaddress: 76BF5E10
IAT USER32.dll CallWindowProcA 0094B948 APIaddress: 76BF4600
IAT USER32.dll CreateWindowExA 0094B948 APIaddress: 76BF89F0
IAT USER32.dll RegisterHotKey 0094B948 APIaddress: 76C12C50
IAT USER32.dll UnregisterHotKey 0094B948 APIaddress: 76C13220
IAT USER32.dll GetForegroundWindow 0094B948 APIaddress: 76C12330
IAT USER32.dll CopyAcceleratorTableA 0094B948 APIaddress: 76C2FFE0
IAT USER32.dll GetKeyState 0094B948 APIaddress: 76C0CAC0
IAT USER32.dll TranslateAcceleratorA 0094B948 APIaddress: 76BF3E50
IAT USER32.dll SetScrollPos 0094B948 APIaddress: 76BED110
IAT USER32.dll IsWindowEnabled 0094B948 APIaddress: 76C05210
IAT USER32.dll DestroyAcceleratorTable 0094B948 APIaddress: 76C010F0
IAT USER32.dll UnregisterClassA 0094B948 APIaddress: 76BF9240
IAT USER32.dll TranslateMessage 0094B948 APIaddress: 76C0ACC0
IAT USER32.dll GetWindowTextLengthA 0094B948 APIaddress: 76BF9B60
IAT USER32.dll CharUpperA 0094B948 APIaddress: 76BFC350
IAT USER32.dll GetWindowDC 0094B948 APIaddress: 76C12680
IAT USER32.dll BeginPaint 0094B948 APIaddress: 76C11DB0
IAT USER32.dll EndPaint 0094B948 APIaddress: 76C121B0
IAT USER32.dll TabbedTextOutA 0094B948 APIaddress: 76C35CE0
IAT USER32.dll DrawTextA 0094B948 APIaddress: 76BF2BC0
IAT USER32.dll GrayStringA 0094B948 APIaddress: 76C61450
IAT USER32.dll DestroyWindow 0094B948 APIaddress: 76C12000
IAT USER32.dll CreateDialogIndirectParamA 0094B948 APIaddress: 76BFC250
IAT USER32.dll EndDialog 0094B948 APIaddress: 76BFAAA0
IAT USER32.dll GetNextDlgTabItem 0094B948 APIaddress: 76BFC690
IAT USER32.dll GetWindowPlacement 0094B948 APIaddress: 76C126D0
IAT USER32.dll RegisterWindowMessageA 0094B948 APIaddress: 76C0F0E0
IAT USER32.dll GetLastActivePopup 0094B948 APIaddress: 76BF81C0
IAT USER32.dll GetMessageTime 0094B948 APIaddress: 76C10FB0
IAT USER32.dll RemovePropA 0094B948 APIaddress: 76BF9660
IAT USER32.dll GetPropA 0094B948 APIaddress: 76BF55B0
IAT USER32.dll UnhookWindowsHookEx 0094B948 APIaddress: 76C111C0
IAT USER32.dll SetPropA 0094B948 APIaddress: 76BF8980
IAT USER32.dll GetClassLongA 0094B948 APIaddress: 76BF7660
IAT USER32.dll CallNextHookEx 0094B948 APIaddress: 76C0BCD0
IAT USER32.dll SetWindowsHookExA 0094B948 APIaddress: 76BFAD70
IAT USER32.dll GetMenuItemID 0094B948 APIaddress: 76BF2290
IAT USER32.dll GetMenuItemCount 0094B948 APIaddress: 76BF2240
IAT USER32.dll RegisterClassA 0094B948 APIaddress: 76BF2530
IAT USER32.dll GetScrollPos 0094B948 APIaddress: 76BF84F0
IAT USER32.dll AdjustWindowRectEx 0094B948 APIaddress: 76BFDE60
IAT USER32.dll MapWindowPoints 0094B948 APIaddress: 76C05150
IAT USER32.dll SendDlgItemMessageA 0094B948 APIaddress: 76BF4710
IAT USER32.dll ScrollWindowEx 0094B948 APIaddress: 76BF8250
IAT USER32.dll IsDialogMessageA 0094B948 APIaddress: 76BFB2E0
IAT USER32.dll SetWindowTextA 0094B948 APIaddress: 76BF74F0
IAT USER32.dll MoveWindow 0094B948 APIaddress: 76C129B0
IAT USER32.dll CheckMenuItem 0094B948 APIaddress: 76BF1590
IAT GDI32.dll LineTo 0094BBC0 APIaddress: 75674330
IAT GDI32.dll MoveToEx 0094BBC0 APIaddress: 75673E60
IAT GDI32.dll ExcludeClipRect 0094BBC0 APIaddress: 75678F00
IAT GDI32.dll CreateCompatibleBitmap 0094BBC0 APIaddress: 75677070
IAT GDI32.dll CreateDCA 0094BBC0 APIaddress: 756750F0
IAT GDI32.dll CreateBitmap 0094BBC0 APIaddress: 75677400
IAT GDI32.dll SelectObject 0094BBC0 APIaddress: 75676CA0
IAT GDI32.dll GetObjectA 0094BBC0 APIaddress: 75673EA0
IAT GDI32.dll CreatePen 0094BBC0 APIaddress: 75674580
IAT GDI32.dll PatBlt 0094BBC0 APIaddress: 75673DD0
IAT GDI32.dll CombineRgn 0094BBC0 APIaddress: 75673370
IAT GDI32.dll CreateRectRgn 0094BBC0 APIaddress: 75676360
IAT GDI32.dll FillRgn 0094BBC0 APIaddress: 756753D0
IAT GDI32.dll CreateSolidBrush 0094BBC0 APIaddress: 75677440
IAT GDI32.dll GetStockObject 0094BBC0 APIaddress: 75675F50
IAT GDI32.dll CreateFontIndirectA 0094BBC0 APIaddress: 75674CC0
IAT GDI32.dll EndPage 0094BBC0 APIaddress: 75674C30
IAT GDI32.dll EndDoc 0094BBC0 APIaddress: 75675270
IAT GDI32.dll DeleteDC 0094BBC0 APIaddress: 75676890
IAT GDI32.dll StartDocA 0094BBC0 APIaddress: 7567DA40
IAT GDI32.dll StartPage 0094BBC0 APIaddress: 75674C00
IAT GDI32.dll BitBlt 0094BBC0 APIaddress: 75676DE0
IAT GDI32.dll Ellipse 0094BBC0 APIaddress: 7567D480
IAT GDI32.dll Rectangle 0094BBC0 APIaddress: 75674730
IAT GDI32.dll LPtoDP 0094BBC0 APIaddress: 75673D50
IAT GDI32.dll DPtoLP 0094BBC0 APIaddress: 75674480
IAT GDI32.dll GetCurrentObject 0094BBC0 APIaddress: 75676E50
IAT GDI32.dll RoundRect 0094BBC0 APIaddress: 7567D9C0
IAT GDI32.dll GetTextExtentPoint32A 0094BBC0 APIaddress: 75675230
IAT GDI32.dll GetDeviceCaps 0094BBC0 APIaddress: 75675FC0
IAT GDI32.dll CreateFontA 0094BBC0 APIaddress: 756752A0
IAT GDI32.dll TranslateCharsetInfo 0094BBC0 APIaddress: 756773C0
IAT GDI32.dll GetClipBox 0094BBC0 APIaddress: 756742F0
IAT GDI32.dll ScaleWindowExtEx 0094BBC0 APIaddress: 7567B550
IAT GDI32.dll SetWindowExtEx 0094BBC0 APIaddress: 75674900
IAT GDI32.dll SetWindowOrgEx 0094BBC0 APIaddress: 75673D90
IAT GDI32.dll ScaleViewportExtEx 0094BBC0 APIaddress: 7567B530
IAT GDI32.dll SetViewportExtEx 0094BBC0 APIaddress: 75674940
IAT GDI32.dll OffsetViewportOrgEx 0094BBC0 APIaddress: 75678340
IAT GDI32.dll SetViewportOrgEx 0094BBC0 APIaddress: 75673F10
IAT GDI32.dll SetMapMode 0094BBC0 APIaddress: 75673F50
IAT GDI32.dll SetTextColor 0094BBC0 APIaddress: 75676E90
IAT GDI32.dll SetROP2 0094BBC0 APIaddress: 756744C0
IAT GDI32.dll ExtSelectClipRgn 0094BBC0 APIaddress: 75676F80
IAT GDI32.dll GetViewportExtEx 0094BBC0 APIaddress: 7567B270
IAT GDI32.dll PtVisible 0094BBC0 APIaddress: 7567B470
IAT GDI32.dll RectVisible 0094BBC0 APIaddress: 75673F90
IAT GDI32.dll TextOutA 0094BBC0 APIaddress: 75675170
IAT GDI32.dll ExtTextOutA 0094BBC0 APIaddress: 75673FD0
IAT GDI32.dll Escape 0094BBC0 APIaddress: 75674540
IAT GDI32.dll GetTextMetricsA 0094BBC0 APIaddress: 75673CA0
IAT GDI32.dll GetPolyFillMode 0094BBC0 APIaddress: 7567B170
IAT GDI32.dll GetStretchBltMode 0094BBC0 APIaddress: 7567B1B0
IAT GDI32.dll GetROP2 0094BBC0 APIaddress: 756747A0
IAT GDI32.dll GetBkColor 0094BBC0 APIaddress: 75673EE0
IAT GDI32.dll GetBkMode 0094BBC0 APIaddress: 75678260
IAT GDI32.dll GetTextColor 0094BBC0 APIaddress: 75674280
IAT GDI32.dll CreateRoundRectRgn 0094BBC0 APIaddress: 75674830
IAT GDI32.dll CreateEllipticRgn 0094BBC0 APIaddress: 75679360
IAT GDI32.dll PathToRegion 0094BBC0 APIaddress: 75678CF0
IAT GDI32.dll SetPolyFillMode 0094BBC0 APIaddress: 75674640
IAT GDI32.dll SetBkMode 0094BBC0 APIaddress: 75676FC0
IAT GDI32.dll RestoreDC 0094BBC0 APIaddress: 75677000
IAT GDI32.dll SaveDC 0094BBC0 APIaddress: 75677040
IAT GDI32.dll EndPath 0094BBC0 APIaddress: 756748A0
IAT GDI32.dll BeginPath 0094BBC0 APIaddress: 756748D0
IAT GDI32.dll GetWindowOrgEx 0094BBC0 APIaddress: 75678300
IAT GDI32.dll GetViewportOrgEx 0094BBC0 APIaddress: 75674110
IAT GDI32.dll GetWindowExtEx 0094BBC0 APIaddress: 756782E0
IAT GDI32.dll GetDIBits 0094BBC0 APIaddress: 756770B0
IAT GDI32.dll RealizePalette 0094BBC0 APIaddress: 756747D0
IAT GDI32.dll SelectPalette 0094BBC0 APIaddress: 75674370
IAT GDI32.dll StretchBlt 0094BBC0 APIaddress: 75673E10
IAT GDI32.dll CreatePalette 0094BBC0 APIaddress: 756776B0
IAT GDI32.dll CreateDIBitmap 0094BBC0 APIaddress: 75677380
IAT GDI32.dll DeleteObject 0094BBC0 APIaddress: 75675880
IAT GDI32.dll SelectClipRgn 0094BBC0 APIaddress: 75675F10
IAT GDI32.dll CreatePolygonRgn 0094BBC0 APIaddress: 756749C0
IAT GDI32.dll GetClipRgn 0094BBC0 APIaddress: 756770F0
IAT GDI32.dll SetStretchBltMode 0094BBC0 APIaddress: 75677300
IAT GDI32.dll CreateRectRgnIndirect 0094BBC0 APIaddress: 75676330
IAT GDI32.dll SetBkColor 0094BBC0 APIaddress: 75676F00
IAT GDI32.dll CreateCompatibleDC 0094BBC0 APIaddress: 75676D90
IAT GDI32.dll GetSystemPaletteEntries 0094BBC0 APIaddress: 75677670
IAT WINSPOOL.DRV OpenPrinterA 0094BD14 APIaddress: 6EA1FB40
IAT WINSPOOL.DRV DocumentPropertiesA 0094BD14 APIaddress: 6EA1E220
IAT WINSPOOL.DRV ClosePrinter 0094BD14 APIaddress: 6EA074B0
IAT ADVAPI32.dll RegQueryValueExA 0094BD24 APIaddress: 7643EF90
IAT ADVAPI32.dll RegOpenKeyExA 0094BD24 APIaddress: 7643F150
IAT ADVAPI32.dll RegSetValueExA 0094BD24 APIaddress: 76440600
IAT ADVAPI32.dll RegQueryValueA 0094BD24 APIaddress: 76432610
IAT ADVAPI32.dll RegCreateKeyExA 0094BD24 APIaddress: 7643F490
IAT ADVAPI32.dll RegCloseKey 0094BD24 APIaddress: 7643F060
IAT ADVAPI32.dll RegOpenKeyA 0094BD24 APIaddress: 76440620
IAT SHELL32.dll DragAcceptFiles 0094BD44 APIaddress: 750B2B20
IAT SHELL32.dll ShellExecuteA 0094BD44 APIaddress: 7519A6D0
IAT SHELL32.dll Shell_NotifyIconA 0094BD44 APIaddress: 751F7060
IAT SHELL32.dll DragFinish 0094BD44 APIaddress: 7517C4A0
IAT SHELL32.dll DragQueryFileA 0094BD44 APIaddress: 7517C4B0
IAT ole32.dll CLSIDFromString 0094BD5C APIaddress: 7572E5F0
IAT ole32.dll OleUninitialize 0094BD5C APIaddress: 75FD75D0
IAT ole32.dll OleInitialize 0094BD5C APIaddress: 75FD3B10
IAT OLEAUT32.dll 0094BD6C APIaddress: 00000000
IAT OLEAUT32.dll 0094BD6C APIaddress: 00000000
IAT OLEAUT32.dll 0094BD6C APIaddress: 00000000
IAT COMCTL32.dll ImageList_Add 0094BD7C APIaddress: 705D27C0
IAT COMCTL32.dll ImageList_BeginDrag 0094BD7C APIaddress: 7063D330
IAT COMCTL32.dll ImageList_Create 0094BD7C APIaddress: 705D2980
IAT COMCTL32.dll ImageList_Destroy 0094BD7C APIaddress: 705D0860
IAT COMCTL32.dll ImageList_DragEnter 0094BD7C APIaddress: 7063D570
IAT COMCTL32.dll ImageList_DragLeave 0094BD7C APIaddress: 7063D5C0
IAT COMCTL32.dll ImageList_DragMove 0094BD7C APIaddress: 7063D610
IAT COMCTL32.dll ImageList_DragShowNolock 0094BD7C APIaddress: 7063D660
IAT COMCTL32.dll ImageList_EndDrag 0094BD7C APIaddress: 7063D730
IAT COMCTL32.dll 0094BD7C APIaddress: 00000000
IAT COMCTL32.dll ImageList_Read 0094BD7C APIaddress: 705F5280
IAT COMCTL32.dll ImageList_Duplicate 0094BD7C APIaddress: 7063D6B0
IAT comdlg32.dll ChooseColorA 0094BDB0 APIaddress: 75F05320
IAT comdlg32.dll GetFileTitleA 0094BDB0 APIaddress: 75F0C900
IAT comdlg32.dll GetSaveFileNameA 0094BDB0 APIaddress: 75F0CE90
IAT comdlg32.dll GetOpenFileNameA 0094BDB0 APIaddress: 75F0CDB0
IAT WTSAPI32.dll WTSSendMessageW 0094BDC4 APIaddress: 74D75590
IAT KERNEL32.dll VirtualQuery 0094BDCC APIaddress: 76E7F810
IAT KERNEL32.dll GetSystemTimeAsFileTime 0094BDCC APIaddress: 76E7F630
IAT KERNEL32.dll GetModuleHandleA 0094BDCC APIaddress: 76E80D00
IAT KERNEL32.dll CreateEventA 0094BDCC APIaddress: 76E831D0
IAT KERNEL32.dll GetModuleFileNameW 0094BDCC APIaddress: 76E80BA0
IAT KERNEL32.dll LoadLibraryA 0094BDCC APIaddress: 76E80E70
IAT KERNEL32.dll TerminateProcess 0094BDCC APIaddress: 76E79910
IAT KERNEL32.dll GetCurrentProcess 0094BDCC APIaddress: 76E83120
IAT KERNEL32.dll CreateToolhelp32Snapshot 0094BDCC APIaddress: 76E84670
IAT KERNEL32.dll Thread32First 0094BDCC APIaddress: 76EBAB90
IAT KERNEL32.dll GetCurrentProcessId 0094BDCC APIaddress: 76E83130
IAT KERNEL32.dll GetCurrentThreadId 0094BDCC APIaddress: 76E7E1B0
IAT KERNEL32.dll OpenThread 0094BDCC APIaddress: 76E7F850
IAT KERNEL32.dll Thread32Next 0094BDCC APIaddress: 76EBAC40
IAT KERNEL32.dll CloseHandle 0094BDCC APIaddress: 76E83180
IAT KERNEL32.dll SuspendThread 0094BDCC APIaddress: 76E94E70
IAT KERNEL32.dll ResumeThread 0094BDCC APIaddress: 76E81B90
IAT KERNEL32.dll WriteProcessMemory 0094BDCC APIaddress: 76E95220
IAT KERNEL32.dll GetSystemInfo 0094BDCC APIaddress: 76E81BB0
IAT KERNEL32.dll VirtualAlloc 0094BDCC APIaddress: 76E7F660
IAT KERNEL32.dll VirtualProtect 0094BDCC APIaddress: 76E80760
IAT KERNEL32.dll VirtualFree 0094BDCC APIaddress: 76E7F760
IAT KERNEL32.dll GetProcessAffinityMask 0094BDCC APIaddress: 76E820E0
IAT KERNEL32.dll SetProcessAffinityMask 0094BDCC APIaddress: 76EBCEF0
IAT KERNEL32.dll GetCurrentThread 0094BDCC APIaddress: 76E7EA50
IAT KERNEL32.dll SetThreadAffinityMask 0094BDCC APIaddress: 76EBF5F0
IAT KERNEL32.dll Sleep 0094BDCC APIaddress: 76E811A0
IAT KERNEL32.dll FreeLibrary 0094BDCC APIaddress: 76E80D80
IAT KERNEL32.dll GetTickCount 0094BDCC APIaddress: 76E82640
IAT KERNEL32.dll SystemTimeToFileTime 0094BDCC APIaddress: 76E813C0
IAT KERNEL32.dll FileTimeToSystemTime 0094BDCC APIaddress: 76E838C0
IAT KERNEL32.dll GlobalFree 0094BDCC APIaddress: 76E80260
IAT KERNEL32.dll LocalAlloc 0094BDCC APIaddress: 76E80700
IAT KERNEL32.dll LocalFree 0094BDCC APIaddress: 76E7F7D0
IAT KERNEL32.dll GetProcAddress 0094BDCC APIaddress: 76E7F7F0
IAT KERNEL32.dll ExitProcess 0094BDCC APIaddress: 76E84650
IAT KERNEL32.dll EnterCriticalSection 0094BDCC APIaddress: 7706FF80
IAT KERNEL32.dll LeaveCriticalSection 0094BDCC APIaddress: 7706E7F0
IAT KERNEL32.dll InitializeCriticalSection 0094BDCC APIaddress: 7708C3B0
IAT KERNEL32.dll DeleteCriticalSection 0094BDCC APIaddress: 7705FC40
IAT KERNEL32.dll GetModuleHandleW 0094BDCC APIaddress: 76E810F0
IAT KERNEL32.dll LoadResource 0094BDCC APIaddress: 76E7EAE0
IAT KERNEL32.dll MultiByteToWideChar 0094BDCC APIaddress: 76E7E220
IAT KERNEL32.dll FindResourceExW 0094BDCC APIaddress: 76E7FE60
IAT KERNEL32.dll FindResourceExA 0094BDCC APIaddress: 76E7B4B0
IAT KERNEL32.dll WideCharToMultiByte 0094BDCC APIaddress: 76E7E290
IAT KERNEL32.dll GetThreadLocale 0094BDCC APIaddress: 76E789D0
IAT KERNEL32.dll GetUserDefaultLCID 0094BDCC APIaddress: 76E7EA00
IAT KERNEL32.dll GetSystemDefaultLCID 0094BDCC APIaddress: 76E77CB0
IAT KERNEL32.dll EnumResourceNamesA 0094BDCC APIaddress: 76E91540
IAT KERNEL32.dll EnumResourceNamesW 0094BDCC APIaddress: 76E83880
IAT KERNEL32.dll EnumResourceLanguagesA 0094BDCC APIaddress: 76E914E0
IAT KERNEL32.dll EnumResourceLanguagesW 0094BDCC APIaddress: 76E91510
IAT KERNEL32.dll EnumResourceTypesA 0094BDCC APIaddress: 76E91570
IAT KERNEL32.dll EnumResourceTypesW 0094BDCC APIaddress: 76E915A0
IAT KERNEL32.dll CreateFileW 0094BDCC APIaddress: 76E833E0
IAT KERNEL32.dll LoadLibraryW 0094BDCC APIaddress: 76E81960
IAT KERNEL32.dll GetLastError 0094BDCC APIaddress: 76E7E2B0
IAT KERNEL32.dll FlushFileBuffers 0094BDCC APIaddress: 76E83540
IAT KERNEL32.dll CreateFileA 0094BDCC APIaddress: 76E833D0
IAT KERNEL32.dll WriteConsoleW 0094BDCC APIaddress: 76E83C30
IAT KERNEL32.dll GetConsoleOutputCP 0094BDCC APIaddress: 76E83B70
IAT KERNEL32.dll WriteConsoleA 0094BDCC APIaddress: 76E83C20
IAT KERNEL32.dll GetCommandLineA 0094BDCC APIaddress: 76E82180
IAT KERNEL32.dll RaiseException 0094BDCC APIaddress: 76E80850
IAT KERNEL32.dll RtlUnwind 0094BDCC APIaddress: 76E80860
IAT KERNEL32.dll HeapFree 0094BDCC APIaddress: 76E7E200
IAT KERNEL32.dll GetCPInfo 0094BDCC APIaddress: 76E817D0
IAT KERNEL32.dll InterlockedIncrement 0094BDCC APIaddress: 76E7EA80
IAT KERNEL32.dll InterlockedDecrement 0094BDCC APIaddress: 76E7EB00
IAT KERNEL32.dll GetACP 0094BDCC APIaddress: 76E80660
IAT KERNEL32.dll GetOEMCP 0094BDCC APIaddress: 76E82430
IAT KERNEL32.dll IsValidCodePage 0094BDCC APIaddress: 76E81940
IAT KERNEL32.dll TlsGetValue 0094BDCC APIaddress: 76E7E1C0
IAT KERNEL32.dll TlsAlloc 0094BDCC APIaddress: 76E813E0
IAT KERNEL32.dll TlsSetValue 0094BDCC APIaddress: 76E7E250
IAT KERNEL32.dll TlsFree 0094BDCC APIaddress: 76E81210
IAT KERNEL32.dll SetLastError 0094BDCC APIaddress: 76E7E240
IAT KERNEL32.dll UnhandledExceptionFilter 0094BDCC APIaddress: 76E94F00
IAT KERNEL32.dll SetUnhandledExceptionFilter 0094BDCC APIaddress: 76E819C0
IAT KERNEL32.dll IsDebuggerPresent 0094BDCC APIaddress: 76E82370
IAT KERNEL32.dll HeapAlloc 0094BDCC APIaddress: 77075E30
IAT KERNEL32.dll LCMapStringA 0094BDCC APIaddress: 76E798B0
IAT KERNEL32.dll LCMapStringW 0094BDCC APIaddress: 76E81110
IAT KERNEL32.dll SetHandleCount 0094BDCC APIaddress: 76E82230
IAT KERNEL32.dll GetStdHandle 0094BDCC APIaddress: 76E819A0
IAT KERNEL32.dll GetFileType 0094BDCC APIaddress: 76E83630
IAT KERNEL32.dll GetStartupInfoA 0094BDCC APIaddress: 76E80F20
IAT KERNEL32.dll GetModuleFileNameA 0094BDCC APIaddress: 76E810D0
IAT KERNEL32.dll FreeEnvironmentStringsA 0094BDCC APIaddress: 76E93290
IAT KERNEL32.dll GetEnvironmentStrings 0094BDCC APIaddress: 76E93520
IAT KERNEL32.dll FreeEnvironmentStringsW 0094BDCC APIaddress: 76E81E40
IAT KERNEL32.dll GetEnvironmentStringsW 0094BDCC APIaddress: 76E82190
IAT KERNEL32.dll HeapCreate 0094BDCC APIaddress: 76E80CE0
IAT KERNEL32.dll HeapDestroy 0094BDCC APIaddress: 76E80E90
IAT KERNEL32.dll QueryPerformanceCounter 0094BDCC APIaddress: 76E7E1E0
IAT KERNEL32.dll HeapReAlloc 0094BDCC APIaddress: 770727B0
IAT KERNEL32.dll GetStringTypeA 0094BDCC APIaddress: 76E798D0
IAT KERNEL32.dll GetStringTypeW 0094BDCC APIaddress: 76E80EE0
IAT KERNEL32.dll GetLocaleInfoA 0094BDCC APIaddress: 76E78410
IAT KERNEL32.dll HeapSize 0094BDCC APIaddress: 7708B910
IAT KERNEL32.dll WriteFile 0094BDCC APIaddress: 76E83850
IAT KERNEL32.dll SetFilePointer 0094BDCC APIaddress: 76E837F0
IAT KERNEL32.dll GetConsoleCP 0094BDCC APIaddress: 76E83B50
IAT KERNEL32.dll GetConsoleMode 0094BDCC APIaddress: 76E83B60
IAT KERNEL32.dll InitializeCriticalSectionAndSpinCount 0094BDCC APIaddress: 76E83280
IAT KERNEL32.dll SetStdHandle 0094BDCC APIaddress: 76E94CA0
IAT USER32.dll GetProcessWindowStation 0094BF7C APIaddress: 76C12550
IAT USER32.dll GetUserObjectInformationW 0094BF7C APIaddress: 76C12640
IAT USER32.dll CharUpperBuffW 0094BF7C APIaddress: 76C5C240
IAT USER32.dll MessageBoxW 0094BF7C APIaddress: 76C51E60
IAT KERNEL32.dll LocalAlloc 0094BF90 APIaddress: 76E80700
IAT KERNEL32.dll LocalFree 0094BF90 APIaddress: 76E7F7D0
IAT KERNEL32.dll GetModuleFileNameW 0094BF90 APIaddress: 76E80BA0
IAT KERNEL32.dll GetProcessAffinityMask 0094BF90 APIaddress: 76E820E0
IAT KERNEL32.dll SetProcessAffinityMask 0094BF90 APIaddress: 76EBCEF0
IAT KERNEL32.dll SetThreadAffinityMask 0094BF90 APIaddress: 76EBF5F0
IAT KERNEL32.dll Sleep 0094BF90 APIaddress: 76E811A0
IAT KERNEL32.dll ExitProcess 0094BF90 APIaddress: 76E84650
IAT KERNEL32.dll FreeLibrary 0094BF90 APIaddress: 76E80D80
IAT KERNEL32.dll LoadLibraryA 0094BF90 APIaddress: 76E80E70
IAT KERNEL32.dll GetModuleHandleA 0094BF90 APIaddress: 76E80D00
IAT KERNEL32.dll GetProcAddress 0094BF90 APIaddress: 76E7F7F0
IAT USER32.dll GetProcessWindowStation 0094BFC4 APIaddress: 76C12550
IAT USER32.dll GetUserObjectInformationW 0094BFC4 APIaddress: 76C12640
restore OEP: 004A5360
The OEP restore is complete
后面应该咋操作，请大佬们指教，小弟实在对脱壳不太懂。
源程序如下：
https://wwt.lanzoul.com/in0uE1y2794d | 
发表于 2024-5-8 10:17
|
发表于 2024-5-8 15:53
