00401133 > \68 1C394000 push 40391C ; /pProcessInfo = lll.0040391C
00401138 . 68 9F344000 push 40349F ; |pStartupInfo = lll.0040349F
0040113D . 6A 00 push 0 ; |CurrentDir = NULL
0040113F . 6A 00 push 0 ; |pEnvironment = NULL
00401141 . 6A 00 push 0 ; |CreationFlags = 0
00401143 . 6A 00 push 0 ; |InheritHandles = FALSE
00401145 . 6A 00 push 0 ; |pThreadSecurity = NULL
00401147 . 6A 00 push 0 ; |pProcessSecurity = NULL
00401149 . 6A 00 push 0 ; |CommandLine = NULL
0040114B . 50 push eax ; |ModuleFileName
0040114C . E8 D3080000 call 00401A24 ; \CreateProcessA
00401151 . 85C0 test eax, eax

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课