Reverse theory knowledge 4

Guess:

• When we see a directive like [ecx+4], we can infer that this is a class

00407A20 | 8B41 04 | mov eax,span>dword ptr ds:[ecx+4]00407A23 | 85C0 | test eax,eax00407A25 | 74 09 | je sword2_1024_768_windows_2.00407A27 | 8B41 08 | mov eax,dword ptr ds:[ecx+8]00407A2A | 83C1 08 | add ecx,8span>00407A2D | FF60 08 | jmp dword ptr ds:[eax+8]00407A30 | C3 | ret

Evidence: Ctrl+F9, F7; observe the assembly instructions, whether there is an address assigned to ECX such instructions before CALL xxxxbr>