00408B9D |> \33C0 XOR EAX,EAX
00408B9F |. 50 PUSH EAX ; /lParam => 0
00408BA0 |. 50 PUSH EAX ; |wParam => 0
00408BA1 |. 8B40 20 MOV EAX,DWORD PTR DS:[EAX+20] ; |
00408BA4 |. 68 64040000 PUSH 464 ; |Message = MSG(464)
00408BA9 |. 50 PUSH EAX ; |hWnd
00408BAA |. FF15 0C064100 CALL DWORD PTR DS:[<&USER32.SendMessageA>; \SendMessageA
00408BB0 |. C2 0400 RETN 4
00408BB3 |> E8 42520000 CALL <JMP.&MFC71.#1091_AfxGetThread> ; 案例 67 ('g') --> 分支 00408B64
00408BB8 |. 85C0 TEST EAX,EAX
00408BBA |. 74 1D JE SHORT viewZgxq.00408BD9
00408BBC |. 8B10 MOV EDX,DWORD PTR DS:[EAX]
00408BBE |. 8BC8 MOV ECX,EAX
00408BC0 |. FF52 7C CALL DWORD PTR DS:[EDX+7C]
00408BC3 |. 8B40 20 MOV EAX,DWORD PTR DS:[EAX+20]
00408BC6 |. 6A 00 PUSH 0 ; /lParam = 0
00408BC8 |. 6A 00 PUSH 0 ; |wParam = 0
00408BCA |. 68 67040000 PUSH 467 ; |Message = MSG(467)
00408BCF |. 50 PUSH EAX ; |hWnd
00408BD0 |. FF15 0C064100 CALL DWORD PTR DS:[<&USER32.SendMessageA>; \SendMessageA
00408BD6 |. C2 0400 RETN 4
00408BD9 |> 33C0 XOR EAX,EAX
00408BDB |. 50 PUSH EAX ; /lParam => 0
00408BDC |. 50 PUSH EAX ; |wParam => 0
00408BDD |. 8B40 20 MOV EAX,DWORD PTR DS:[EAX+20] ; |
00408BE0 |. 68 67040000 PUSH 467 ; |Message = MSG(467)
00408BE5 |. 50 PUSH EAX ; |hWnd
00408BE6 |. FF15 0C064100 CALL DWORD PTR DS:[<&USER32.SendMessageA>; \SendMessageA
00408BEC |. C2 0400 RETN 4
00408BEF |> E8 06520000 CALL <JMP.&MFC71.#1091_AfxGetThread> ; 案例 66 ('f') --> 分支 00408B64
00408BF4 |. 85C0 TEST EAX,EAX
00408BF6 |. 74 1D JE SHORT viewZgxq.00408C15
00408BF8 |. 8B10 MOV EDX,DWORD PTR DS:[EAX]
00408BFA |. 8BC8 MOV ECX,EAX
00408BFC |. FF52 7C CALL DWORD PTR DS:[EDX+7C]
00408BFF |. 8B40 20 MOV EAX,DWORD PTR DS:[EAX+20]
00408C02 |. 6A 00 PUSH 0 ; /lParam = 0
00408C04 |. 6A 00 PUSH 0 ; |wParam = 0
00408C06 |. 68 66040000 PUSH 466 ; |Message = MSG(466)
00408C0B |. 50 PUSH EAX ; |hWnd
00408C0C |. FF15 0C064100 CALL DWORD PTR DS:[<&USER32.SendMessageA>; \SendMessageA
00408C12 |. C2 0400 RETN 4
00408C15 |> 33C0 XOR EAX,EAX
msg(466,464,467,4c8)代表什么消息？在网上找了，没查到，请高手赐教
[课程]Linux pwn 探索篇！
