label the dll jump table at 0x008a5b00

openblack · Feb 23, 2025 · ee57591 · ee57591
1 parent 6694a4c
commit ee57591
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 21 deletions.
diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
@@ -374,7 +374,7 @@ set(SOURCES
     asm/unprocessed/runblack.reassemble.1337.008a2770-008a5030.asm
     asm/unprocessed/runblack.reassemble.1338.008a5030-008a5440-binkw32.dll-wsock32.dll-kernel32.dll-user32.dll-gdi32.dll-advapi32.dll-ole32.dll-lhlogr.dll.asm
     asm/unprocessed/runblack.reassemble.1339.008a5440-008a5b00.asm
-    asm/unprocessed/runblack.reassemble.1342.008a5b00-008a5f63.asm
+    asm/unprocessed/runblack.reassemble.1342.008a5b00-008a5b0c-dll-jmp-table.asm
 )
 
 add_library(runblack-reassembled-src OBJECT ${SOURCES})

diff --git a/src/asm/unprocessed/runblack.reassemble.1342.008a5b00-008a5b0c-dll-jmp-table.asm b/src/asm/unprocessed/runblack.reassemble.1342.008a5b00-008a5b0c-dll-jmp-table.asm
@@ -0,0 +1,11 @@
+.intel_syntax noprefix
+.balign 0
+
+.extern __imp__DirectInputCreateA@4
+.extern __imp__LHWaveGetQMixerDirectSoundObject_LH_AudioSystem__QAEPAXXZ@4
+
+.globl _jmp_addr_0x008a5b00
+
+_jmp_addr_0x008a5b00:
+                         jmp              dword ptr [__imp__DirectInputCreateA@4]                                         // 0x008a5b00    ff2534908a00
+                         jmp              dword ptr [__imp__LHWaveGetQMixerDirectSoundObject_LH_AudioSystem__QAEPAXXZ@4]  // 0x008a5b06    ff25c4968a00
diff --git a/src/asm/unprocessed/runblack.reassemble.1342.008a5b00-008a5f63.asm b/src/asm/unprocessed/runblack.reassemble.1342.008a5b00-008a5f63.asm
diff --git a/src/asm/unprocessed/runblack.reassemble.1344.008a6460-008a6470-dll-jmp-table.asm b/src/asm/unprocessed/runblack.reassemble.1344.008a6460-008a6470-dll-jmp-table.asm
@@ -1,17 +1,18 @@
 .intel_syntax noprefix
 .balign 0
 
-.extern rdata_bytes
+.extern __imp__GetCurrentProcessId@0
+.extern __imp__GetSystemTimeAsFileTime@4
 
 // Unable to set this byte so it's done in post process
 //                          int3                                                     // 0x008a645b    cc
-                         int3                                                     // 0x008a645c    cc
-                         int3                                                     // 0x008a645d    cc
-                         int3                                                     // 0x008a645e    cc
-                         int3                                                     // 0x008a645f    cc
-                         jmp              dword ptr [rdata_bytes + 0x31c]         // 0x008a6460    ff251c938a00
-                         jmp              dword ptr [rdata_bytes + 0x26c]         // 0x008a6466    ff256c928a00
-                         int3                                                     // 0x008a646c    cc
-                         int3                                                     // 0x008a646d    cc
-                         int3                                                     // 0x008a646e    cc
-                         int3                                                     // 0x008a646f    cc
+                         int3                                                          // 0x008a645c    cc
+                         int3                                                          // 0x008a645d    cc
+                         int3                                                          // 0x008a645e    cc
+                         int3                                                          // 0x008a645f    cc
+                         jmp              dword ptr [__imp__GetCurrentProcessId@0]     // 0x008a6460    ff251c938a00
+                         jmp              dword ptr [__imp__GetSystemTimeAsFileTime@4] // 0x008a6466    ff256c928a00
+                         int3                                                          // 0x008a646c    cc
+                         int3                                                          // 0x008a646d    cc
+                         int3                                                          // 0x008a646e    cc
+                         int3                                                          // 0x008a646f    cc