用w32dasm打开
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004F7323(C)
|
:004F734B 8D55F0 lea edx, dword ptr [ebp-10]
:004F734E 8B83F0020000 mov eax, dword ptr [ebx+000002F0]
:004F7354 E8BF30F5FF call 0044A418
:004F7359 8B45F0 mov eax, dword ptr [ebp-10]
:004F735C 8D55FC lea edx, dword ptr [ebp-04]
:004F735F E8ECFDFFFF call 004F7150
:004F7364 8D55EC lea edx, dword ptr [ebp-14]
:004F7367 8B83F4020000 mov eax, dword ptr [ebx+000002F4]
:004F736D E8A630F5FF call 0044A418 －－－－－－－－－－－－－关键call
:004F7372 8B55EC mov edx, dword ptr [ebp-14]
:004F7375 8B45FC mov eax, dword ptr [ebp-04]
:004F7378 E80FD9F0FF call 00404C8C
:004F737D 7556 jne 004F73D5
:004F737F E8DC030000 call 004F7760
:004F7384 84C0 test al, al
:004F7386 742A je 004F73B2
:004F7388 6A40 push 00000040
:004F738A A150BD5100 mov eax, dword ptr [0051BD50]
:004F738F 8B00 mov eax, dword ptr [eax]
:004F7391 E8AAD9F0FF call 00404D40
:004F7396 8BC8 mov ecx, eax
* Possible StringData Ref from Code Obj ->"Register successfull, Thank you."
跟进call来到
:00404C8C 53 push ebx
:00404C8D 56 push esi
:00404C8E 57 push edi
:00404C8F 89C6 mov esi, eax
:00404C91 89D7 mov edi, edx
:00404C93 39D0 cmp eax, edx －－－－－－－－^_^
:00404C95 0F848F000000 je 00404D2A
:00404C9B 85F6 test esi, esi
中断地址：4F7378 中断次数：1 第一字节：E8 指令长度：5
中断地址：404C93 中断次数：1 第一字节：39 指令长度：2