00459E65 6A 00 push 0
00459E67 6A 04 push 4
00459E69 A1 ACDC4500 mov eax,dword ptr ds:[45DCAC]
; eax=0xcc \\0xb4 \\0xd8,句柄值
00459E6E 50 push eax
; 将此句柄值压入堆栈,供下一函数用
00459E6F E8 98C3FAFF call ;映射文件名
; Retn EAX=01330000=》ASCII "一大串数字"
00459E74 8BF0 mov esi,eax
堆栈值：
eax=01310000, (ASCII "5F7E8111692AAA7694C721CB5300D7072A14D8CE7138EA0903AEAA23D8907C6072109D983725466507924E2237B9AF5BFBA7FC98060E8E620FE692E8DA4EE8D963D6241181D3988E9A13550DC7AF1E816F8FB154967BA939DDF9F6AC6F9B225CBDBDADFF3410875CA95DC8BA5C46BBC9A79DDA0F)
esi=00429028 (超强灰鸽.00429028)
??? 不知道是什么数据来的 ??? 检验码？
00459E76 85F6 test esi,esi
00459E78 74 62 je short 超强灰鸽.00459EDC ; NoT jUMP
00459E7A 8D45 F4 lea eax,dword ptr ss:[ebp-C]
; EAX=0X12F640
00459E7D 8BD6 mov edx,esi
; 将那串字符串传入EDX中
00459E7F E8 48A2FAFF call 超强灰鸽.004040CC ; ECX=00,EDX=00
00459E84 B2 01 mov dl,1 ; edx=0x1
00459E86 A1 70954500 mov eax,dword ptr ds:[459570]
00459E8B E8 48F7FFFF call 超强灰鸽.004595D8
00459E90 8BF0 mov esi,eax
00459E92 8B45 F4 mov eax,dword ptr ss:[ebp-C] ;
将那串字符串再入传入
00459E95 E8 FAA4FAFF call 超强灰鸽.00404394
00459E9A 8BD0 mov edx,eax
00459E9C 8D45 EC lea eax,dword ptr ss:[ebp-14]
|
