是下是按下“运行”按钮到出现“未注册，是否注册”对话框的CODE，找不到在什么地方判断的，大家帮看看
00404F40 > \55 push ebp
00404F41 . 8BEC mov ebp,esp
00404F43 83EC 0C sub esp,0C
00404F46 68 76114000 push <jmp.&MSVBVM60.__vbaExceptHandler> ; 入口地址
00404F4B . 64:A1 00000000 mov eax,dword ptr fs:[0]
00404F51 . 50 push eax
00404F52 . 64:8925 00000000 mov dword ptr fs:[0],esp
00404F59 . 81EC 9C010000 sub esp,19C
00404F5F . 53 push ebx
00404F60 . 56 push esi
00404F61 . 57 push edi
00404F62 . 8965 F4 mov dword ptr ss:[ebp-C],esp
00404F65 . C745 F8 C8104000 mov dword ptr ss:[ebp-8],siguo.004010C8
00404F6C . 8B45 08 mov eax,dword ptr ss:[ebp+8]
00404F6F . 8BC8 mov ecx,eax
00404F71 83E1 01 and ecx,1
00404F74 . 894D FC mov dword ptr ss:[ebp-4],ecx
00404F77 24 FE and al,0FE
00404F79 . 50 push eax
00404F7A . 8945 08 mov dword ptr ss:[ebp+8],eax
00404F7D . 8B10 mov edx,dword ptr ds:[eax]
00404F7F . FF52 04 call dword ptr ds:[edx+4] ; MSVBVM60.Zombie_AddRef
00404F82 . 8B1D A4104000 mov ebx,dword ptr ds:[<&MSVBVM60.__vbaVarDup>>; MSVBVM60.__vbaVarDup
00404F88 . B9 04000280 mov ecx,80020004
00404F8D . 33FF xor edi,edi
00404F8F . 898D 3CFFFFFF mov dword ptr ss:[ebp-C4],ecx
00404F95 B8 0A000000 mov eax,0A
00404F9A . 898D 4CFFFFFF mov dword ptr ss:[ebp-B4],ecx
00404FA0 BE 08000000 mov esi,8
00404FA5 . 89BD 44FFFFFF mov dword ptr ss:[ebp-BC],edi
00404FAB . 89BD 34FFFFFF mov dword ptr ss:[ebp-CC],edi
00404FB1 . 89BD D4FEFFFF mov dword ptr ss:[ebp-12C],edi
00404FB7 . 8D95 D4FEFFFF lea edx,dword ptr ss:[ebp-12C]
00404FBD . 8D8D 54FFFFFF lea ecx,dword ptr ss:[ebp-AC]
00404FC3 . 897D DC mov dword ptr ss:[ebp-24],edi
00404FC6 . 897D CC mov dword ptr ss:[ebp-34],edi
00404FC9 . 897D BC mov dword ptr ss:[ebp-44],edi
00404FCC . 897D AC mov dword ptr ss:[ebp-54],edi
00404FCF . 897D 9C mov dword ptr ss:[ebp-64],edi
00404FD2 . 897D 8C mov dword ptr ss:[ebp-74],edi
00404FD5 . 89BD 7CFFFFFF mov dword ptr ss:[ebp-84],edi
00404FDB . 89BD 78FFFFFF mov dword ptr ss:[ebp-88],edi
00404FE1 . 89BD 74FFFFFF mov dword ptr ss:[ebp-8C],edi
00404FE7 . 89BD 64FFFFFF mov dword ptr ss:[ebp-9C],edi
00404FED . 89BD 54FFFFFF mov dword ptr ss:[ebp-AC],edi
00404FF3 . 89BD 24FFFFFF mov dword ptr ss:[ebp-DC],edi
00404FF9 . 89BD 14FFFFFF mov dword ptr ss:[ebp-EC],edi
00404FFF . 89BD 04FFFFFF mov dword ptr ss:[ebp-FC],edi
00405005 . 89BD F4FEFFFF mov dword ptr ss:[ebp-10C],edi
0040500B . 89BD E4FEFFFF mov dword ptr ss:[ebp-11C],edi
00405011 . 89BD C4FEFFFF mov dword ptr ss:[ebp-13C],edi
00405017 . 89BD A4FEFFFF mov dword ptr ss:[ebp-15C],edi
0040501D . 89BD 6CFEFFFF mov dword ptr ss:[ebp-194],edi
00405023 . 89BD 5CFEFFFF mov dword ptr ss:[ebp-1A4],edi
00405029 . 8985 34FFFFFF mov dword ptr ss:[ebp-CC],eax
0040502F . 8985 44FFFFFF mov dword ptr ss:[ebp-BC],eax
00405035 . C785 DCFEFFFF F43>mov dword ptr ss:[ebp-124],siguo.00403DF4
0040503F . 89B5 D4FEFFFF mov dword ptr ss:[ebp-12C],esi
00405045 . FFD3 call ebx ; <&MSVBVM60.__vbaVarDup>
00405047 . 8D95 E4FEFFFF lea edx,dword ptr ss:[ebp-11C]
0040504D . 8D8D 64FFFFFF lea ecx,dword ptr ss:[ebp-9C]
00405053 . C785 ECFEFFFF E03>mov dword ptr ss:[ebp-114],siguo.00403DE0
0040505D . 89B5 E4FEFFFF mov dword ptr ss:[ebp-11C],esi
00405063 . FFD3 call ebx
00405065 . 8D85 34FFFFFF lea eax,dword ptr ss:[ebp-CC]
0040506B . 8D8D 44FFFFFF lea ecx,dword ptr ss:[ebp-BC]
00405071 . 50 push eax
00405072 . 8D95 54FFFFFF lea edx,dword ptr ss:[ebp-AC]
00405078 . 51 push ecx
00405079 . 52 push edx
0040507A . 8D85 64FFFFFF lea eax,dword ptr ss:[ebp-9C]
00405080 6A 24 push 24
00405082 . 50 push eax
00405083 FF15 34104000 call dword ptr ds:[<&MSVBVM60.#595>] ; rtcMsgBox 未注册版本，是否注册
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
