opcode_dumper.c

gistfile1.txt

void DumpHandlers(DWORD_PTR baseAddr)
{
    int getPtrOffset = 0x257D58; // x86 21463
    typedef DWORD*(*GetPtr)();
    typedef BOOL(__cdecl *CheckOpcode)(WORD);

    DWORD* ptrTable = GetPtr(baseAddr + getPtrOffset)();
    DWORD v7 = *ptrTable;

    for (const auto& element : opcodeList)
    {
        int opcode = element.first;
        char* name = element.second;

        while (1)
        {
            if (CheckOpcode(*(DWORD *)v7 + 4)(opcode))
            {
                DWORD handler = (*(DWORD*)v7 + 20) - baseAddr;
                printf("Opcode: 0x%04X Handler: 0x%08X  %s\n", opcode, handler, name);
                break;
            }
            // todo: need validate this check
            if (v7 == (*(DWORD*)(ptrTable + 4) * *(ptrTable+4)))
                break;
        }
    }
}