IDA - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

.text:6EA69940 .text:6EA69940 ; =============== S U B R O U T I N E ======================================= .text:6EA69940 .text:6EA69940 ; Microsoft VisualC 2-9/net runtime .text:6EA69940 ; Attributes: library function bp-based frame .text:6EA69940 .text:6EA69940 unknown_libname_65 proc near ; CODE XREF: sub_6E7C8054+D9p .text:6EA69940 ; sub_6E7CD07B+102p ... .text:6EA69940 .text:6EA69940 arg_0 = dword ptr 8 .text:6EA69940 arg_4 = dword ptr 0Ch .text:6EA69940 arg_8 = dword ptr 10h .text:6EA69940 .text:6EA69940 push ebp .text:6EA69941 mov ebp, esp .text:6EA69943 push edi .text:6EA69944 push esi .text:6EA69945 mov esi, [ebp+arg_4] .text:6EA69948 mov ecx, [ebp+arg_8] .text:6EA6994B mov edi, [ebp+arg_0] .text:6EA6994E mov eax, ecx .text:6EA69950 mov edx, ecx .text:6EA69952 add eax, esi .text:6EA69954 cmp edi, esi .text:6EA69956 jbe short unknown_libname_66 ; Microsoft VisualC 2-9/net runtime .text:6EA69958 cmp edi, eax .text:6EA6995A jb unknown_libname_86 ; Microsoft VisualC 2-9/net runtime .text:6EA69960 .text:6EA69960 unknown_libname_66: ; CODE XREF: unknown_libname_65+16j .text:6EA69960 cmp ecx, 100h ; Microsoft VisualC 2-9/net runtime .text:6EA69966 jb short unknown_libname_67 ; Microsoft VisualC 2-9/net runtime .text:6EA69968 cmp dword_6EBEE5D0, 0 .text:6EA6996F jz short unknown_libname_67 ; Microsoft VisualC 2-9/net runtime .text:6EA69971 push edi .text:6EA69972 push esi .text:6EA69973 and edi, 0Fh .text:6EA69976 and esi, 0Fh .text:6EA69979 cmp edi, esi .text:6EA6997B pop esi .text:6EA6997C pop edi .text:6EA6997D jnz short unknown_libname_67 ; Microsoft VisualC 2-9/net runtime .text:6EA6997F pop esi .text:6EA69980 pop edi .text:6EA69981 pop ebp .text:6EA69982 jmp __VEC_memcpy .text:6EA69987 ; --------------------------------------------------------------------------- .text:6EA69987 .text:6EA69987 unknown_libname_67: ; CODE XREF: unknown_libname_65+26j .text:6EA69987 ; unknown_libname_65+2Fj ... .text:6EA69987 test edi, 3 ; Microsoft VisualC 2-9/net runtime .text:6EA6998D jnz short unknown_libname_68 ; Microsoft VisualC 2-9/net runtime .text:6EA6998F shr ecx, 2 .text:6EA69992 and edx, 3 .text:6EA69995 cmp ecx, 8 .text:6EA69998 jb short unknown_libname_70 ; Microsoft VisualC 2-9/net runtime .text:6EA6999A rep movsd .text:6EA6999C jmp ds:off_6EA69AB4[edx*4] ; Microsoft VisualC 2-9/net runtime .text:6EA6999C ; --------------------------------------------------------------------------- .text:6EA699A3 align 4 .text:6EA699A4 .text:6EA699A4 unknown_libname_68: ; CODE XREF: unknown_libname_65+4Dj .text:6EA699A4 mov eax, edi ; Microsoft VisualC 2-9/net runtime .text:6EA699A6 mov edx, 3 .text:6EA699AB sub ecx, 4 .text:6EA699AE jb short unknown_libname_69 ; Microsoft VisualC 2-9/net runtime .text:6EA699B0 and eax, 3 .text:6EA699B3 add ecx, eax .text:6EA699B5 jmp dword ptr ds:(unknown_libname_70+4)[eax*4] ; Microsoft VisualC 2-9/net runtime .text:6EA699BC ; --------------------------------------------------------------------------- .text:6EA699BC .text:6EA699BC unknown_libname_69: ; CODE XREF: unknown_libname_65+6Ej .text:6EA699BC jmp dword ptr ds:unknown_libname_82[ecx*4] ; Microsoft VisualC 2-9/net runtime .text:6EA699BC ; --------------------------------------------------------------------------- .text:6EA699C3 align 4 .text:6EA699C4 .text:6EA699C4 unknown_libname_70: ; CODE XREF: unknown_libname_65+58j .text:6EA699C4 ; unknown_libname_65+B6j ... .text:6EA699C4 jmp ds:off_6EA69A48[ecx*4] ; Microsoft VisualC 2-9/net runtime .text:6EA699C4 ; --------------------------------------------------------------------------- .text:6EA699CB align 4 .text:6EA699CC dd offset unknown_libname_71 ; Microsoft VisualC 2-9/net runtime .text:6EA699D0 dd offset unknown_libname_72 ; Microsoft VisualC 2-9/net runtime .text:6EA699D4 dd offset unknown_libname_73 ; Microsoft VisualC 2-9/net runtime .text:6EA699D8 ; --------------------------------------------------------------------------- .text:6EA699D8 .text:6EA699D8 unknown_libname_71: ; DATA XREF: unknown_libname_65+8Co .text:6EA699D8 and edx, ecx ; Microsoft VisualC 2-9/net runtime .text:6EA699DA mov al, [esi] .text:6EA699DC mov [edi], al .text:6EA699DE mov al, [esi+1] .text:6EA699E1 mov [edi+1], al .text:6EA699E4 mov al, [esi+2] .text:6EA699E7 shr ecx, 2 .text:6EA699EA mov [edi+2], al .text:6EA699ED add esi, 3 .text:6EA699F0 add edi, 3 .text:6EA699F3 cmp ecx, 8 .text:6EA699F6 jb short unknown_libname_70 ; Microsoft VisualC 2-9/net runtime .text:6EA699F8 rep movsd .text:6EA699FA jmp ds:off_6EA69AB4[edx*4] ; Microsoft VisualC 2-9/net runtime .text:6EA699FA ; --------------------------------------------------------------------------- .text:6EA69A01 align 4 .text:6EA69A04 .text:6EA69A04 unknown_libname_72: ; DATA XREF: unknown_libname_65+90o .text:6EA69A04 and edx, ecx ; Microsoft VisualC 2-9/net runtime .text:6EA69A06 mov al, [esi] .text:6EA69A08 mov [edi], al .text:6EA69A0A mov al, [esi+1] .text:6EA69A0D shr ecx, 2 .text:6EA69A10 mov [edi+1], al .text:6EA69A13 add esi, 2 .text:6EA69A16 add edi, 2 .text:6EA69A19 cmp ecx, 8 .text:6EA69A1C jb short unknown_libname_70 ; Microsoft VisualC 2-9/net runtime .text:6EA69A1E rep movsd .text:6EA69A20 jmp ds:off_6EA69AB4[edx*4] ; Microsoft VisualC 2-9/net runtime .text:6EA69A20 ; --------------------------------------------------------------------------- .text:6EA69A27 align 4 .text:6EA69A28 .text:6EA69A28 unknown_libname_73: ; DATA XREF: unknown_libname_65+94o .text:6EA69A28 and edx, ecx ; Microsoft VisualC 2-9/net runtime .text:6EA69A2A mov al, [esi] .text:6EA69A2C mov [edi], al .text:6EA69A2E add esi, 1 .text:6EA69A31 shr ecx, 2 .text:6EA69A34 add edi, 1 .text:6EA69A37 cmp ecx, 8 .text:6EA69A3A jb short unknown_libname_70 ; Microsoft VisualC 2-9/net runtime .text:6EA69A3C rep movsd .text:6EA69A3E jmp ds:off_6EA69AB4[edx*4] ; Microsoft VisualC 2-9/net runtime .text:6EA69A3E ; --------------------------------------------------------------------------- .text:6EA69A45 align 4 .text:6EA69A48 off_6EA69A48 dd offset unknown_libname_81 .text:6EA69A48 ; DATA XREF: unknown_libname_65:unknown_libname_70r .text:6EA69A48 ; Microsoft VisualC 2-9/net runtime .text:6EA69A4C dd offset unknown_libname_80 ; Microsoft VisualC 2-9/net runtime .text:6EA69A50 dd offset unknown_libname_79 ; Microsoft VisualC 2-9/net runtime .text:6EA69A54 dd offset unknown_libname_78 ; Microsoft VisualC 2-9/net runtime .text:6EA69A58 dd offset unknown_libname_77 ; Microsoft VisualC 2-9/net runtime .text:6EA69A5C dd offset unknown_libname_76 ; Microsoft VisualC 2-9/net runtime .text:6EA69A60 dd offset unknown_libname_75 ; Microsoft VisualC 2-9/net runtime .text:6EA69A64 dd offset unknown_libname_74 ; Microsoft VisualC 2-9/net runtime .text:6EA69A68 ; --------------------------------------------------------------------------- .text:6EA69A68 .text:6EA69A68 unknown_libname_74: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69A68 ; DATA XREF: unknown_libname_65+124o .text:6EA69A68 mov eax, [esi+ecx*4-1Ch] ; Microsoft VisualC 2-9/net runtime .text:6EA69A6C mov [edi+ecx*4-1Ch], eax .text:6EA69A70 .text:6EA69A70 unknown_libname_75: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69A70 ; DATA XREF: unknown_libname_65+120o .text:6EA69A70 mov eax, [esi+ecx*4-18h] ; Microsoft VisualC 2-9/net runtime .text:6EA69A74 mov [edi+ecx*4-18h], eax .text:6EA69A78 .text:6EA69A78 unknown_libname_76: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69A78 ; DATA XREF: unknown_libname_65+11Co .text:6EA69A78 mov eax, [esi+ecx*4-14h] ; Microsoft VisualC 2-9/net runtime .text:6EA69A7C mov [edi+ecx*4-14h], eax .text:6EA69A80 .text:6EA69A80 unknown_libname_77: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69A80 ; DATA XREF: unknown_libname_65+118o .text:6EA69A80 mov eax, [esi+ecx*4-10h] ; Microsoft VisualC 2-9/net runtime .text:6EA69A84 mov [edi+ecx*4-10h], eax .text:6EA69A88 .text:6EA69A88 unknown_libname_78: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69A88 ; DATA XREF: unknown_libname_65+114o .text:6EA69A88 mov eax, [esi+ecx*4-0Ch] ; Microsoft VisualC 2-9/net runtime .text:6EA69A8C mov [edi+ecx*4-0Ch], eax .text:6EA69A90 .text:6EA69A90 unknown_libname_79: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69A90 ; DATA XREF: unknown_libname_65+110o .text:6EA69A90 mov eax, [esi+ecx*4-8] ; Microsoft VisualC 2-9/net runtime .text:6EA69A94 mov [edi+ecx*4-8], eax .text:6EA69A98 .text:6EA69A98 unknown_libname_80: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69A98 ; DATA XREF: unknown_libname_65+10Co .text:6EA69A98 mov eax, [esi+ecx*4-4] ; Microsoft VisualC 2-9/net runtime .text:6EA69A9C mov [edi+ecx*4-4], eax .text:6EA69AA0 lea eax, ds:0[ecx*4] .text:6EA69AA7 add esi, eax .text:6EA69AA9 add edi, eax .text:6EA69AAB .text:6EA69AAB unknown_libname_81: ; CODE XREF: unknown_libname_65:unknown_libname_70j .text:6EA69AAB ; DATA XREF: unknown_libname_65:off_6EA69A48o .text:6EA69AAB jmp ds:off_6EA69AB4[edx*4] ; Microsoft VisualC 2-9/net runtime .text:6EA69AAB ; --------------------------------------------------------------------------- .text:6EA69AB2 align 4 .text:6EA69AB4 off_6EA69AB4 dd offset unknown_libname_82 .text:6EA69AB4 ; DATA XREF: unknown_libname_65+5Cr .text:6EA69AB4 ; unknown_libname_65+BAr ... .text:6EA69AB4 ; Microsoft VisualC 2-9/net runtime .text:6EA69AB8 dd offset unknown_libname_83 ; Microsoft VisualC 2-9/net runtime .text:6EA69ABC dd offset unknown_libname_84 ; Microsoft VisualC 2-9/net runtime .text:6EA69AC0 dd offset unknown_libname_85 ; Microsoft VisualC 2-9/net runtime .text:6EA69AC4 ; --------------------------------------------------------------------------- .text:6EA69AC4 .text:6EA69AC4 unknown_libname_82: ; CODE XREF: unknown_libname_65+5Cj .text:6EA69AC4 ; unknown_libname_65+BAj ... .text:6EA69AC4 mov eax, [ebp+arg_0] ; Microsoft VisualC 2-9/net runtime .text:6EA69AC7 pop esi .text:6EA69AC8 pop edi .text:6EA69AC9 leave .text:6EA69ACA retn .text:6EA69ACA ; --------------------------------------------------------------------------- .text:6EA69ACB align 4 .text:6EA69ACC .text:6EA69ACC unknown_libname_83: ; CODE XREF: unknown_libname_65+5Cj .text:6EA69ACC ; unknown_libname_65+BAj ... .text:6EA69ACC mov al, [esi] ; Microsoft VisualC 2-9/net runtime