016F:0041E965 CALL [USER32!CreatePopupMenu]
016F:0041E96B PUSH EAX ;
016F:0041E96C LEA ECX,[ESP+10]
016F:0041E970 CALL 00452401
016F:0041E975 MOV ECX,EDI
016F:0041E977 CALL 00420CA0
016F:0041E97C MOV EBX,EAX
016F:0041E97E MOV EAX,[EDI+00000A44]
016F:0041E984 PUSH 00
016F:0041E986 PUSH 00
016F:0041E988 PUSH 00001004
016F:0041E98D PUSH EAX
016F:0041E98E CALL [USER32!SendMessageA]
016F:0041E994 MOV ESI,[USER32!AppendMenuA] ?
{疑问:为什么不是AppendMenu(hMenu hMenu,UINT uFlags,UINT uIDNewltem,LPCTSTR lpNewltem),
hMen, uFlags....值如何修改?}
.......
016F:0041EA62 CALL [USER32!GetCursorPos];得到鼠标位置
016F:0041EA68 MOV ECX,[ESP+18]
016F:0041EA6C MOV EDX,[ESP+14]
016F:0041EA70 PUSH 00
016F:0041EA72 PUSH EDI
016F:0041EA73 PUSH ECX
016F:0041EA74 PUSH EDX
016F:0041EA75 PUSH 02
016F:0041EA77 LEA ECX,[ESP+20]
016F:0041EA7B CALL 0044F5F9 ;此call有调用trackpopupmenu
016F:0041EA80 LEA ECX,[ESP+0C]
016F:0041EA84 CALL 00452458
016F:0041EA89 MOV DWORD PTR [ESP+0C],00466914
016F:0041EA91 LEA ECX,[ESP+0C]
016F:0041EA95 MOV DWORD PTR [ESP+24],00000001
016F:0041EA9D CALL 00452458
016F:0041EAA2 MOV ECX,[ESP+1C]
016F:0041EAA6 POP EDI
016F:0041EAA7 POP ESI
016F:0041EAA8 POP EBX
016F:0041EAA9 MOV FS:[00000000],ECX
016F:0041EAB0 ADD ESP,1C
016F:0041EAB3 RET
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课