Web-Money Keeper Classic


Keeper' - 6


 

 11  IOCTL

IOCTL "VALUE" : Device  DISK (0x7), Function  0x20, Access  "FILE_READ_ACCESS", Method  "METHOD_BUFFERED". , , . ! , ! , :

 

.text:100B7F63 push 0 ; lpOverlapped

.text:100B7F65 mov ecx, [ebp+lpBytesReturned]

.text:100B7F68 push ecx ; lpBytesReturned

.text:100B7F69 push 210h ; nOutBufferSize

.text:100B7F6E mov edx, [ebp+lpOutBuffer]

.text:100B7F71 push edx ; lpOutBuffer

.text:100B7F72 push 20h ; nInBufferSize

.text:100B7F74 mov eax, [ebp+lpInBuffer]

.text:100B7F77 push eax ; lpInBuffer

.text:100B7F78 push 7C088h ; dwIoControlCode

.text:100B7F7D mov ecx, [ebp+hDevice]

.text:100B7F80 push ecx ; hDevice

.text:100B7F81 call ds:DeviceIoControl

 6  Keeper', DeviceIoControl

, IOCTL 7C088h , , . , Keeper - "" , " " . Keeper , ? , , , , Keeper ( !)