软件判断有两处
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:005588F3(C)
|
:005588D3 6800080000 push 00000800
:005588D8 FFD5 call ebp
:005588DA 6800080000 push 00000800
:005588DF 57 push edi
:005588E0 50 push eax
:005588E1 8903 mov dword ptr [ebx], eax
:005588E3 E8660F0D00 call 0062984E
:005588E8 83C410 add esp, 00000010
:005588EB 83C304 add ebx, 00000004
:005588EE 836C242801 sub dword ptr [esp+28], 00000001
:005588F3 75DE jne 005588D3
:005588F5 89BEB0710000 mov dword ptr [esi+000071B0], edi
:005588FB 89BEB8710000 mov dword ptr [esi+000071B8], edi
:00558901 89BEB4710000 mov dword ptr [esi+000071B4], edi
:00558907 89BED4710000 mov dword ptr [esi+000071D4], edi
:0055890D C7861072000000040000 mov dword ptr [esi+00007210], 00000400 ------>10进制1024
:00558917 BB01000000 mov ebx, 00000001
:0055891C 899EEC710000 mov dword ptr [esi+000071EC], ebx
:00558922 899EF0710000 mov dword ptr [esi+000071F0], ebx
* Possible Reference to String Resource ID=00255: "End Task"
|
:0054D93F 68FF000000 push 000000FF
:0054D944 8BCE mov ecx, esi
:0054D946 E815A2F3FF call 00487B60
:0054D94B 8B7010 mov esi, dword ptr [eax+10]
:0054D94E 8B400C mov eax, dword ptr [eax+0C]
:0054D951 8B9550020000 mov edx, dword ptr [ebp+00000250]
:0054D957 8B5254 mov edx, dword ptr [edx+54]
:0054D95A 56 push esi
:0054D95B 8D8D50020000 lea ecx, dword ptr [ebp+00000250]
:0054D961 50 push eax
* Possible Reference to String Resource ID=00255: "End Task"
|
:0054D962 68FF000000 push 000000FF
:0054D967 FFD2 call edx
:0054D969 833D74346E0000 cmp dword ptr [006E3474], 00000000
:0054D970 BF00040000 mov edi, 00000400 ------>10进制1024用户
:0054D975 7406 je 0054D97D
:0054D977 89BD10720000 mov dword ptr [ebp+00007210], edi
