-
Generally returned values are in
eax/ah/al/ax -
mov eax, dword_93384means global variable -
[ebp-4]variable on stack -
hFile: handles -
look in the ESI, sometimes numbers are clearly written there
-
mapviewoffile: malloc+memcpy of the file you are opening, nothing more