loc_10046BF4:
lea     edx, [esp+1234h+var_11F3]
push    edx
push    offset s_Reference ; "reference"
lea     ecx, [esp+123Ch+var_1168]
mov     byte ptr [esp+123Ch+var_4], 1
call    ds:stlp_std::basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>::basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>(char const *,basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>::allocator<char> const &)
mov     ebx, eax
lea     eax, [esp+1210h+var_1114]
mov     byte ptr [esp+1210h+arg_18], 2
mov     ecx, [esp+1Ch]
push    eax
call    logLoginHelper::GetVolumeNumber(void)
mov     [esp+1210h+var_11F3+3], eax
push    offset s___     ; "__"
lea     edi, [esp+1214h+var_1174]
mov     byte ptr [esp+1214h+arg_18], 3
call    sub_10047EB0
add     esp, 4
mov     ecx, [esp+1210h+var_11F3+3]
push    ecx
mov     esi, eax
lea     edi, [esp+1214h+var_112C]
mov     byte ptr [esp+1214h+arg_18], 4
call    sub_10047C70
add     esp, 4
push    ebx
mov     esi, eax
lea     edi, [esp+1214h+var_10FC]
mov     byte ptr [esp+1214h+arg_18], 5
call    sub_10047C70
add     esp, 4
lea     ecx, [esp+1210h+var_112C]
mov     byte ptr [esp+1210h+arg_18], 7
call    ds:stlp_std::basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>::~basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>(void)
lea     ecx, [esp+1210h+var_1174]
mov     byte ptr [esp+1210h+arg_18], 8
call    ds:stlp_std::basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>::~basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>(void)
lea     ecx, [esp+1210h+var_1114]
mov     byte ptr [esp+1210h+arg_18], 9
call    ds:stlp_std::basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>::~basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>(void)
lea     ecx, [esp+1210h+var_1144]
mov     byte ptr [esp+1210h+arg_18], 0Ah
call    ds:stlp_std::basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>::~basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>(void)
mov     ecx, edi
mov     byte ptr [esp+1210h+arg_18], 0Bh
call    ds:stlp_std::basic_string<char,stlp_std::char_traits<char>,stlp_std::allocator<char>>::c_str(void)
push    eax
mov     ecx, offset mcCrypto logLoginHelper::ms_CryptoSym
call    ds:mcCrypto::SetSessionKey(char const *)
xor     ebx, ebx
push    1
lea     ecx, [esp+1218h+var_11D0]
mov     [esp+24h], ebx

貌似rc4？？密钥reference？？

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课