I am watching part5 of lena151 RE tut.

the creator said : do understand that the nag is generated in the above call at 004898FE, but is effectively created in MFC42.dll in this call at 489912

So, How did he understand such a thing that the nag is generated in the call at 004898FE ? while the nag is shown at 00489912 ?

enter image description here

  • have you checked inside the first call may it is a wrapper to CreateNag() and the second call is Show Nag()
    – blabb
    Jul 30 at 7:14

Your Answer


Browse other questions tagged or ask your own question.