IAT API HOOK essence is the API interception system or application, if I use CreateRemoteProcess remote injection want want now, I want to intercept ali wangwang, chat window pops up, that is how can I know prosperous pop-up window which function to use the API?

Is through the od, the decompiled or IDA tracking? (ps: I can't use od debugging), or there is no other method, a great god save trouble all of you!!

That is how can I know prosperous pop-up window which function to use the Api?

That is how can I know prosperous pop-up window which function to use the Api?