>>> Âíóòðè GDI32.DLL
Äèçàññåìáëèðîâàíèå GDI32.DLL ëó÷øå âñåãî íà÷èíàòü ñ ôóíêöèè PlayMetaFileRecord/ PlayEnhMetaFileRecord. Ôóíêöèÿ PlayMetaFileRecord ïðåäñòàâëÿåò ñîáîé îãðîìíûé switch, íà case-âåòâÿõ êîòîðîãî ðàñïîëîæåíû âûçûâàåìûå GDI-ôóíêöèè, à PlayEnhMetaFileRecord èñïîëüçóåò òàáëè÷íûé ìåòîä âûçîâà:
.text:77F70CB7 mov ebx, [ebp+arg_C]
.text:77F70CBA push esi
.text:77F70CBB push edi
.text:77F70CBC mov eax, [ebx]
.text:77F70CBE cmp eax, 1
.text:77F70CC1 jb short loc_77F70CDF
.text:77F70CC3 cmp eax, 7Ah
.text:77F70CC6 ja short loc_77F70CDF
.text:77F70CC8 push [ebp+arg_10]
.text:77F70CCB mov ecx, ebx
.text:77F70CCD push [ebp+arg_8]
.text:77F70CD0 push [ebp+arg_4]
.text:77F70CD3 call off_77F7B62C[eax*4]