Functions

Current implementation is only to ignore Calls to GetModuleHandle. This logic needs to be re-evaluated.

seg000:00A31B8F
seg000:00A31B8F                 push    ebp
seg000:00A31B90                 mov     ebp, esp
seg000:00A31B92                 mov     eax, ds:dword_A576C8
seg000:00A31B97                 test    eax, eax
seg000:00A31B99                 jnz     short loc_A31BB1
seg000:00A31B9B                 push    offset aCreatethread ; "CreateThread"
seg000:00A31BA0                 call    _GetModuleBase_Kernel32
seg000:00A31BA5                 push    eax
seg000:00A31BA6                 call    ds:GetProcAddress
seg000:00A31BAC                 mov     ds:dword_A576C8, eax
seg000:00A31BB1
seg000:00A31BB1 loc_A31BB1:                             ; CODE XREF: sub_A31B8F+A?j
seg000:00A31BB1                 push    [ebp+arg_C]
seg000:00A31BB4                 push    [ebp+arg_8]
seg000:00A31BB7                 push    [ebp+arg_4]
seg000:00A31BBA                 push    [ebp+arg_0]
seg000:00A31BBD                 push    0
seg000:00A31BBF                 push    0
seg000:00A31BC1                 call    eax ; dword_A576C8
seg000:00A31BC3                 pop     ebp
seg000:00A31BC4                 retn    10h
seg000:00A31BC4 sub_A31B8F      endp
seg000:00A31BC4

Also, renaming this function as a wrapper function would be cool.

Comments (0)