; Syntax for each function in a thunk (the separator is a TAB)
; ------------------------------------------------------------
; Flag   RVA   ModuleName   Ordinal   Name
;
; Details for <Valid> parameter:
; ------------------------------
; Flag:  0 = valid: no  -> - Name contains the address of the redirected API (you can set
;                            it to zero if you edit it).
;                          - Ordinal is not considered but you should let '0000' as value.
;                          - ModuleName is not considered but you should let '?' as value.
;
;        1 = valid: yes -> All next parameters on the line will be considered.
;                          Function imported by ordinal must have no name (the 4th TAB must
;                                                                          be there though).
;
;        2 = Equivalent to 0 but it is for the loader.
;
;        3 = Equivalent to 1 but it is for the loader.
;
;        4 = Equivalent to 0 with (R) tag.
;
;        5 = Equivalent to 1 with (R) tag.
;
; And finally, edit this file as your own risk! :-)

Target: c:\windows\system32\keylib32.dll
OEP: 00016A4D	IATRVA: 0001D000	IATSize: 00001000

FThunk: 0001D000	NbFunc: 00000015
1	0001D000	advapi32.dll	01D2	RegDeleteValueA
1	0001D004	advapi32.dll	01D6	RegEnumKeyExA
1	0001D008	advapi32.dll	01E7	RegQueryInfoKeyA
1	0001D00C	advapi32.dll	01D0	RegDeleteKeyA
1	0001D010	advapi32.dll	01D9	RegEnumValueA
1	0001D014	advapi32.dll	01F8	RegSetValueA
1	0001D018	advapi32.dll	01CD	RegCreateKeyExA
1	0001D01C	advapi32.dll	01F9	RegSetValueExA
1	0001D020	advapi32.dll	01AA	OpenSCManagerA
1	0001D024	advapi32.dll	0040	CloseServiceHandle
1	0001D028	advapi32.dll	0065	CreateServiceA
1	0001D02C	advapi32.dll	01AC	OpenServiceA
1	0001D030	advapi32.dll	023E	StartServiceA
1	0001D034	advapi32.dll	01C0	QueryServiceStatus
1	0001D038	advapi32.dll	0044	ControlService
1	0001D03C	advapi32.dll	00B0	DeleteService
1	0001D040	advapi32.dll	01EC	RegQueryValueExA
1	0001D044	advapi32.dll	01E1	RegOpenKeyA
1	0001D048	advapi32.dll	01E2	RegOpenKeyExA
1	0001D04C	advapi32.dll	01C9	RegCloseKey
1	0001D050	advapi32.dll	01CC	RegCreateKeyA

FThunk: 0001D058	NbFunc: 0000000D
1	0001D058	gdi32.dll	002D	CreateCompatibleBitmap
1	0001D05C	gdi32.dll	020F	SelectObject
1	0001D060	gdi32.dll	0232	SetPixel
1	0001D064	gdi32.dll	008D	DeleteDC
1	0001D068	gdi32.dll	016C	GetDeviceCaps
1	0001D06C	gdi32.dll	0051	CreateSolidBrush
1	0001D070	gdi32.dll	003A	CreateFontA
1	0001D074	gdi32.dll	0090	DeleteObject
1	0001D078	gdi32.dll	0216	SetBkColor
1	0001D07C	gdi32.dll	01A6	GetStockObject
1	0001D080	gdi32.dll	0217	SetBkMode
1	0001D084	gdi32.dll	023D	SetTextColor
1	0001D088	gdi32.dll	002E	CreateCompatibleDC

FThunk: 0001D090	NbFunc: 00000050
1	0001D090	kernel32.dll	01F9	GlobalReAlloc
1	0001D094	kernel32.dll	015B	GetFileInformationByHandle
1	0001D098	kernel32.dll	01DE	GetVolumeInformationA
1	0001D09C	kernel32.dll	01E6	GetWindowsDirectoryA
1	0001D0A0	kernel32.dll	024C	LocalFree
1	0001D0A4	kernel32.dll	03A0	_llseek
1	0001D0A8	kernel32.dll	02FE	SetEndOfFile
1	0001D0AC	kernel32.dll	0317	SetLocalTime
1	0001D0B0	kernel32.dll	018B	GetOEMCP
1	0001D0B4	kernel32.dll	00F7	GetACP
1	0001D0B8	kernel32.dll	00FE	GetCPInfo
1	0001D0BC	kernel32.dll	02C5	RtlUnwind
1	0001D0C0	kernel32.dll	020D	HeapReAlloc
1	0001D0C4	kernel32.dll	036B	VirtualAlloc
1	0001D0C8	kernel32.dll	00E7	FlushFileBuffers
1	0001D0CC	kernel32.dll	0322	SetStdHandle
1	0001D0D0	kernel32.dll	01B3	GetStringTypeW
1	0001D0D4	kernel32.dll	01B0	GetStringTypeA
1	0001D0D8	kernel32.dll	038C	WriteFile
1	0001D0DC	kernel32.dll	0150	GetEnvironmentStringsW
1	0001D0E0	kernel32.dll	014E	GetEnvironmentStrings
1	0001D0E4	kernel32.dll	0242	LoadLibraryA
1	0001D0E8	kernel32.dll	01EB	GlobalAlloc
1	0001D0EC	kernel32.dll	036E	VirtualFree
1	0001D0F0	kernel32.dll	0205	HeapCreate
1	0001D0F4	kernel32.dll	0207	HeapDestroy
1	0001D0F8	kernel32.dll	0151	GetEnvironmentVariableA
1	0001D0FC	kernel32.dll	0235	LCMapStringW
1	0001D100	kernel32.dll	0234	LCMapStringA
1	0001D104	kernel32.dll	0265	MultiByteToWideChar
1	0001D108	kernel32.dll	037F	WideCharToMultiByte
1	0001D10C	kernel32.dll	0203	HeapAlloc
1	0001D110	kernel32.dll	01AD	GetStartupInfoA
1	0001D114	kernel32.dll	015F	GetFileType
1	0001D118	kernel32.dll	01AF	GetStdHandle
1	0001D11C	kernel32.dll	0255	LockResource
1	0001D120	kernel32.dll	0209	HeapFree
1	0001D124	kernel32.dll	0307	SetFilePointer
1	0001D128	kernel32.dll	02A4	ReadFile
1	0001D12C	kernel32.dll	01DB	GetVersion
1	0001D130	kernel32.dll	010A	GetCommandLineA
1	0001D134	kernel32.dll	013C	GetCurrentProcess
1	0001D138	kernel32.dll	0347	TerminateProcess
1	0001D13C	kernel32.dll	00B7	ExitProcess
1	0001D140	kernel32.dll	00F1	FreeLibrary
1	0001D144	kernel32.dll	01F2	GlobalFree
1	0001D148	kernel32.dll	0174	GetModuleFileNameA
1	0001D14C	kernel32.dll	01F6	GlobalLock
1	0001D150	kernel32.dll	01FD	GlobalUnlock
1	0001D154	kernel32.dll	016B	GetLocalTime
1	0001D158	kernel32.dll	01DC	GetVersionExA
1	0001D15C	kernel32.dll	01B7	GetSystemDirectoryA
1	0001D160	kernel32.dll	013A	GetCurrentDirectoryA
1	0001D164	kernel32.dll	0169	GetLastError
1	0001D168	kernel32.dll	0176	GetModuleHandleA
1	0001D16C	kernel32.dll	0063	CreateProcessA
1	0001D170	kernel32.dll	033F	Sleep
1	0001D174	kernel32.dll	00EF	FreeEnvironmentStringsA
1	0001D178	kernel32.dll	0198	GetProcAddress
1	0001D17C	kernel32.dll	004C	CreateEventA
1	0001D180	kernel32.dll	0089	DeviceIoControl
1	0001D184	kernel32.dll	018C	GetOverlappedResult
1	0001D188	kernel32.dll	03A1	_lopen
1	0001D18C	kernel32.dll	039C	_hread
1	0001D190	kernel32.dll	016E	GetLogicalDriveStringsA
1	0001D194	kernel32.dll	014C	GetDriveTypeA
1	0001D198	kernel32.dll	01D2	GetTickCount
1	0001D19C	kernel32.dll	0344	SystemTimeToFileTime
1	0001D1A0	kernel32.dll	030B	SetFileTime
1	0001D1A4	kernel32.dll	0050	CreateFileA
1	0001D1A8	kernel32.dll	015E	GetFileTime
1	0001D1AC	kernel32.dll	0032	CloseHandle
1	0001D1B0	kernel32.dll	00C4	FileTimeToSystemTime
1	0001D1B4	kernel32.dll	0157	GetFileAttributesA
1	0001D1B8	kernel32.dll	0305	SetFileAttributesA
1	0001D1BC	kernel32.dll	0082	DeleteFileA
1	0001D1C0	kernel32.dll	039F	_lcreat
1	0001D1C4	kernel32.dll	039D	_hwrite
1	0001D1C8	kernel32.dll	00F0	FreeEnvironmentStringsW
1	0001D1CC	kernel32.dll	039E	_lclose

FThunk: 0001D1D4	NbFunc: 00000001
1	0001D1D4	shell32.dll	0167	ShellExecuteA

FThunk: 0001D1DC	NbFunc: 00000027
1	0001D1DC	user32.dll	009F	DialogBoxParamA
1	0001D1E0	user32.dll	01BE	LoadImageA
1	0001D1E4	user32.dll	009C	DialogBoxIndirectParamA
1	0001D1E8	user32.dll	0096	DestroyCursor
1	0001D1EC	user32.dll	0114	GetDlgItemTextA
1	0001D1F0	user32.dll	01A4	IsDlgButtonChecked
1	0001D1F4	user32.dll	00C7	EndDialog
1	0001D1F8	user32.dll	010F	GetDesktopWindow
1	0001D1FC	user32.dll	0175	GetWindowRect
1	0001D200	user32.dll	0284	SetWindowPos
1	0001D204	user32.dll	010D	GetDC
1	0001D208	user32.dll	003C	CheckRadioButton
1	0001D20C	user32.dll	0287	SetWindowTextA
1	0001D210	user32.dll	0281	SetWindowLongA
1	0001D214	user32.dll	015B	GetSysColor
1	0001D218	user32.dll	016F	GetWindowLongA
1	0001D21C	user32.dll	0194	InvalidateRect
1	0001D220	user32.dll	02BC	UpdateWindow
1	0001D224	user32.dll	0178	GetWindowTextA
1	0001D228	user32.dll	001C	CallWindowProcA
1	0001D22C	user32.dll	024E	SetCursor
1	0001D230	user32.dll	0254	SetDlgItemTextA
1	0001D234	user32.dll	0112	GetDlgItem
1	0001D238	user32.dll	0293	ShowWindow
1	0001D23C	user32.dll	0117	GetFocus
1	0001D240	user32.dll	0217	RegisterClassA
1	0001D244	user32.dll	01DD	MessageBoxA
1	0001D248	user32.dll	0061	CreateWindowExA
1	0001D24C	user32.dll	02D0	WaitForInputIdle
1	0001D250	user32.dll	00E4	FindWindowA
1	0001D254	user32.dll	009A	DestroyWindow
1	0001D258	user32.dll	02B4	UnregisterClassA
1	0001D25C	user32.dll	01FE	PeekMessageA
1	0001D260	user32.dll	02AB	TranslateMessage
1	0001D264	user32.dll	00A2	DispatchMessageA
1	0001D268	user32.dll	023C	SendMessageA
1	0001D26C	user32.dll	008F	DefWindowProcA
1	0001D270	user32.dll	02D9	wsprintfA
1	0001D274	user32.dll	0058	CreateIcon

