-
-
[旧帖] [求助]请高手看看这些是不是算法所在 0.00雪花
-
发表于: 2007-11-6 09:15 3209
-
0041D5A4 55 push ebp
0041D5A5 8BEC mov ebp, esp
0041D5A7 83C4D0 add esp, -$30
0041D5AA 53 push ebx
0041D5AB 8BD8 mov ebx, eax
0041D5AD B830284B00 mov eax, $004B2830
* Reference to : TDengdaiForm._PROC_004887B8()
|
0041D5B2 E801B20600 call 004887B8
* Reference to control OpenDialog1 : TOpenDialog
|
0041D5B7 8B83FC020000 mov eax, [ebx+$02FC]
0041D5BD 8B10 mov edx, [eax]
0041D5BF FF523C call dword ptr [edx+$3C]
0041D5C2 3C01 cmp al, $01
0041D5C4 0F85D3000000 jnz 0041D69D
0041D5CA 66C745E00800 mov word ptr [ebp-$20], $0008
0041D5D0 33C9 xor ecx, ecx
0041D5D2 894DFC mov [ebp-$04], ecx
0041D5D5 8D55FC lea edx, [ebp-$04]
0041D5D8 FF45EC inc dword ptr [ebp-$14]
* Reference to control OpenDialog1 : TOpenDialog
|
0041D5DB 8B83FC020000 mov eax, [ebx+$02FC]
* Reference to: dialogs.TOpenDialog.GetFileName(TOpenDialog):TFileName;
|
0041D5E1 E856800200 call 0044563C
0041D5E6 8D4DFC lea ecx, [ebp-$04]
0041D5E9 8B1540A04B00 mov edx, [$004BA040]
0041D5EF 8B01 mov eax, [ecx]
0041D5F1 50 push eax
0041D5F2 8B0A mov ecx, [edx]
0041D5F4 51 push ecx
* Reference to : TMmForm._PROC_0041D6AC()
|
0041D5F5 E8B2000000 call 0041D6AC
0041D5FA 83C408 add esp, +$08
0041D5FD FF4DEC dec dword ptr [ebp-$14]
0041D600 8D45FC lea eax, [ebp-$04]
0041D603 BA02000000 mov edx, $00000002
* Reference to : TDengdaiForm._PROC_004964CC()
|
0041D608 E8BF8E0700 call 004964CC
0041D60D 8B0D40A04B00 mov ecx, [$004BA040]
0041D613 8B01 mov eax, [ecx]
0041D615 50 push eax
|
0041D616 E8AD1DFFFF call 0040F3C8
0041D61B 59 pop ecx
0041D61C 3C01 cmp al, $01
0041D61E 7550 jnz 0041D670
0041D620 8B1540A04B00 mov edx, [$004BA040]
0041D626 8B0A mov ecx, [edx]
0041D628 51 push ecx
|
0041D629 E80A20FFFF call 0040F638
0041D62E 59 pop ecx
0041D62F 3C01 cmp al, $01
0041D631 753D jnz 0041D670
0041D633 66C745E01400 mov word ptr [ebp-$20], $0014
* Possible String Reference to: '导入注册文件注册成功'
|
0041D639 BA42244B00 mov edx, $004B2442
0041D63E 8D45F8 lea eax, [ebp-$08]
|
0041D641 E8CE8D0700 call 00496414
0041D646 FF45EC inc dword ptr [ebp-$14]
0041D649 8B00 mov eax, [eax]
* Reference to: dialogs.ShowMessage(AnsiString);
|
0041D64B E81C8A0200 call 0044606C
0041D650 FF4DEC dec dword ptr [ebp-$14]
0041D653 8D45F8 lea eax, [ebp-$08]
0041D656 BA02000000 mov edx, $00000002
* Reference to : TDengdaiForm._PROC_004964CC()
|
0041D65B E86C8E0700 call 004964CC
0041D660 C6830803000001 mov byte ptr [ebx+$0308], $01
0041D667 8BC3 mov eax, ebx
* Reference to: forms.TCustomForm.Close(TCustomForm);
|
0041D669 E8EA090200 call 0043E058
0041D66E EB2D jmp 0041D69D
0041D670 66C745E02000 mov word ptr [ebp-$20], $0020
* Possible String Reference to: '导入注册文件注册失败'
|
0041D676 BA57244B00 mov edx, $004B2457
0041D67B 8D45F4 lea eax, [ebp-$0C]
|
0041D67E E8918D0700 call 00496414
0041D683 FF45EC inc dword ptr [ebp-$14]
0041D686 8B00 mov eax, [eax]
* Reference to: dialogs.ShowMessage(AnsiString);
|
0041D688 E8DF890200 call 0044606C
0041D68D FF4DEC dec dword ptr [ebp-$14]
0041D690 8D45F4 lea eax, [ebp-$0C]
0041D693 BA02000000 mov edx, $00000002
* Reference to : TDengdaiForm._PROC_004964CC()
|
0041D698 E82F8E0700 call 004964CC
0041D69D 8B4DD0 mov ecx, [ebp-$30]
0041D6A0 64890D00000000 mov fs:[$00000000], ecx
0041D6A7 5B pop ebx
0041D6A8 8BE5 mov esp, ebp
0041D6AA 5D pop ebp
0041D6AB C3 ret
但用od不能跟踪，这是为什么？
0041D5A5 8BEC mov ebp, esp
0041D5A7 83C4D0 add esp, -$30
0041D5AA 53 push ebx
0041D5AB 8BD8 mov ebx, eax
0041D5AD B830284B00 mov eax, $004B2830
* Reference to : TDengdaiForm._PROC_004887B8()
|
0041D5B2 E801B20600 call 004887B8
* Reference to control OpenDialog1 : TOpenDialog
|
0041D5B7 8B83FC020000 mov eax, [ebx+$02FC]
0041D5BD 8B10 mov edx, [eax]
0041D5BF FF523C call dword ptr [edx+$3C]
0041D5C2 3C01 cmp al, $01
0041D5C4 0F85D3000000 jnz 0041D69D
0041D5CA 66C745E00800 mov word ptr [ebp-$20], $0008
0041D5D0 33C9 xor ecx, ecx
0041D5D2 894DFC mov [ebp-$04], ecx
0041D5D5 8D55FC lea edx, [ebp-$04]
0041D5D8 FF45EC inc dword ptr [ebp-$14]
* Reference to control OpenDialog1 : TOpenDialog
|
0041D5DB 8B83FC020000 mov eax, [ebx+$02FC]
* Reference to: dialogs.TOpenDialog.GetFileName(TOpenDialog):TFileName;
|
0041D5E1 E856800200 call 0044563C
0041D5E6 8D4DFC lea ecx, [ebp-$04]
0041D5E9 8B1540A04B00 mov edx, [$004BA040]
0041D5EF 8B01 mov eax, [ecx]
0041D5F1 50 push eax
0041D5F2 8B0A mov ecx, [edx]
0041D5F4 51 push ecx
* Reference to : TMmForm._PROC_0041D6AC()
|
0041D5F5 E8B2000000 call 0041D6AC
0041D5FA 83C408 add esp, +$08
0041D5FD FF4DEC dec dword ptr [ebp-$14]
0041D600 8D45FC lea eax, [ebp-$04]
0041D603 BA02000000 mov edx, $00000002
* Reference to : TDengdaiForm._PROC_004964CC()
|
0041D608 E8BF8E0700 call 004964CC
0041D60D 8B0D40A04B00 mov ecx, [$004BA040]
0041D613 8B01 mov eax, [ecx]
0041D615 50 push eax
|
0041D616 E8AD1DFFFF call 0040F3C8
0041D61B 59 pop ecx
0041D61C 3C01 cmp al, $01
0041D61E 7550 jnz 0041D670
0041D620 8B1540A04B00 mov edx, [$004BA040]
0041D626 8B0A mov ecx, [edx]
0041D628 51 push ecx
|
0041D629 E80A20FFFF call 0040F638
0041D62E 59 pop ecx
0041D62F 3C01 cmp al, $01
0041D631 753D jnz 0041D670
0041D633 66C745E01400 mov word ptr [ebp-$20], $0014
* Possible String Reference to: '导入注册文件注册成功'
|
0041D639 BA42244B00 mov edx, $004B2442
0041D63E 8D45F8 lea eax, [ebp-$08]
|
0041D641 E8CE8D0700 call 00496414
0041D646 FF45EC inc dword ptr [ebp-$14]
0041D649 8B00 mov eax, [eax]
* Reference to: dialogs.ShowMessage(AnsiString);
|
0041D64B E81C8A0200 call 0044606C
0041D650 FF4DEC dec dword ptr [ebp-$14]
0041D653 8D45F8 lea eax, [ebp-$08]
0041D656 BA02000000 mov edx, $00000002
* Reference to : TDengdaiForm._PROC_004964CC()
|
0041D65B E86C8E0700 call 004964CC
0041D660 C6830803000001 mov byte ptr [ebx+$0308], $01
0041D667 8BC3 mov eax, ebx
* Reference to: forms.TCustomForm.Close(TCustomForm);
|
0041D669 E8EA090200 call 0043E058
0041D66E EB2D jmp 0041D69D
0041D670 66C745E02000 mov word ptr [ebp-$20], $0020
* Possible String Reference to: '导入注册文件注册失败'
|
0041D676 BA57244B00 mov edx, $004B2457
0041D67B 8D45F4 lea eax, [ebp-$0C]
|
0041D67E E8918D0700 call 00496414
0041D683 FF45EC inc dword ptr [ebp-$14]
0041D686 8B00 mov eax, [eax]
* Reference to: dialogs.ShowMessage(AnsiString);
|
0041D688 E8DF890200 call 0044606C
0041D68D FF4DEC dec dword ptr [ebp-$14]
0041D690 8D45F4 lea eax, [ebp-$0C]
0041D693 BA02000000 mov edx, $00000002
* Reference to : TDengdaiForm._PROC_004964CC()
|
0041D698 E82F8E0700 call 004964CC
0041D69D 8B4DD0 mov ecx, [ebp-$30]
0041D6A0 64890D00000000 mov fs:[$00000000], ecx
0041D6A7 5B pop ebx
0041D6A8 8BE5 mov esp, ebp
0041D6AA 5D pop ebp
0041D6AB C3 ret
但用od不能跟踪，这是为什么？
赞赏
|
|
|---|---|
|
|
0041C9D0 55 push ebp
0041C9D1 8BEC mov ebp, esp 0041C9D3 81C44CF6FFFF add esp, $FFFFF64C 0041C9D9 53 push ebx 0041C9DA 56 push esi 0041C9DB 57 push edi 0041C9DC 8BD8 mov ebx, eax 0041C9DE B8E4264B00 mov eax, $004B26E4 * Reference to : TDengdaiForm._PROC_004887B8() | 0041C9E3 E8D0BD0600 call 004887B8 0041C9E8 66C7856CFFFFFF0800 mov word ptr [ebp+$FFFFFF6C], $0008 0041C9F1 33D2 xor edx, edx 0041C9F3 33C9 xor ecx, ecx 0041C9F5 8955FC mov [ebp-$04], edx 0041C9F8 33C0 xor eax, eax 0041C9FA FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CA00 33D2 xor edx, edx 0041CA02 66C7856CFFFFFF1400 mov word ptr [ebp+$FFFFFF6C], $0014 0041CA0B 66C7856CFFFFFF2000 mov word ptr [ebp+$FFFFFF6C], $0020 0041CA14 894DF8 mov [ebp-$08], ecx 0041CA17 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CA1D 66C7856CFFFFFF1400 mov word ptr [ebp+$FFFFFF6C], $0014 0041CA26 66C7856CFFFFFF2C00 mov word ptr [ebp+$FFFFFF6C], $002C 0041CA2F 8945F4 mov [ebp-$0C], eax 0041CA32 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CA38 66C7856CFFFFFF1400 mov word ptr [ebp+$FFFFFF6C], $0014 0041CA41 66C7856CFFFFFF3800 mov word ptr [ebp+$FFFFFF6C], $0038 0041CA4A 8955F0 mov [ebp-$10], edx 0041CA4D 8D55F0 lea edx, [ebp-$10] 0041CA50 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] * Reference to control Edit1 : TEdit | 0041CA56 8BB3E0020000 mov esi, [ebx+$02E0] 0041CA5C 8BC6 mov eax, esi * Reference to: controls.TControl.GetText(TControl):TCaption; | 0041CA5E E899E60200 call 0044B0FC 0041CA63 8D45F0 lea eax, [ebp-$10] 0041CA66 33D2 xor edx, edx 0041CA68 8955EC mov [ebp-$14], edx 0041CA6B 8D55EC lea edx, [ebp-$14] 0041CA6E FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] * Reference to : TDengdaiForm._PROC_00496658() | 0041CA74 E8DF9B0700 call 00496658 0041CA79 8D55EC lea edx, [ebp-$14] 0041CA7C 8BC6 mov eax, esi 0041CA7E 8B12 mov edx, [edx] * Reference to: controls.TControl.SetText(TControl;TCaption); | 0041CA80 E8A7E60200 call 0044B12C 0041CA85 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CA8B 8D45EC lea eax, [ebp-$14] 0041CA8E BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CA93 E8349A0700 call 004964CC 0041CA98 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CA9E 8D45F0 lea eax, [ebp-$10] 0041CAA1 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CAA6 E8219A0700 call 004964CC 0041CAAB 66C7856CFFFFFF4400 mov word ptr [ebp+$FFFFFF6C], $0044 0041CAB4 33C9 xor ecx, ecx 0041CAB6 894DE8 mov [ebp-$18], ecx 0041CAB9 8D55E8 lea edx, [ebp-$18] 0041CABC FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] * Reference to control Edit1 : TEdit | 0041CAC2 8B83E0020000 mov eax, [ebx+$02E0] * Reference to: controls.TControl.GetText(TControl):TCaption; | 0041CAC8 E82FE60200 call 0044B0FC 0041CACD 837DE800 cmp dword ptr [ebp-$18], +$00 0041CAD1 7405 jz 0041CAD8 0041CAD3 8B4DE8 mov ecx, [ebp-$18] 0041CAD6 EB05 jmp 0041CADD 0041CAD8 B9C8234B00 mov ecx, $004B23C8 0041CADD 8BF9 mov edi, ecx 0041CADF 33C0 xor eax, eax 0041CAE1 83C9FF or ecx, -$01 0041CAE4 8DB554FEFFFF lea esi, [ebp+$FFFFFE54] 0041CAEA F2 repne 0041CAEB AE scasb 0041CAEC F7D1 not ecx 0041CAEE 2BF9 sub edi, ecx 0041CAF0 8BD1 mov edx, ecx 0041CAF2 87F7 xchg edi, esi 0041CAF4 C1E902 shr ecx, $02 0041CAF7 8BC7 mov eax, edi 0041CAF9 F3 rep 0041CAFA A5 movsd 0041CAFB 8BCA mov ecx, edx 0041CAFD BA02000000 mov edx, $00000002 0041CB02 83E103 and ecx, +$03 0041CB05 8D45E8 lea eax, [ebp-$18] 0041CB08 F3 rep 0041CB09 A4 movsb 0041CB0A FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] * Reference to : TDengdaiForm._PROC_004964CC() | 0041CB10 E8B7990700 call 004964CC 0041CB15 66C7856CFFFFFF5000 mov word ptr [ebp+$FFFFFF6C], $0050 0041CB1E 66C7856CFFFFFF5C00 mov word ptr [ebp+$FFFFFF6C], $005C * Reference to control Memo1 : TMemo | 0041CB27 8BB3E8020000 mov esi, [ebx+$02E8] 0041CB2D 33C0 xor eax, eax 0041CB2F 8945E4 mov [ebp-$1C], eax 0041CB32 81C608020000 add esi, $00000208 0041CB38 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CB3E 8D55E4 lea edx, [ebp-$1C] 0041CB41 8B06 mov eax, [esi] 0041CB43 8B08 mov ecx, [eax] 0041CB45 FF511C call dword ptr [ecx+$1C] 0041CB48 8D55E4 lea edx, [ebp-$1C] 0041CB4B 8D45F8 lea eax, [ebp-$08] * Reference to : TDengdaiForm._PROC_004964FC() | 0041CB4E E8A9990700 call 004964FC 0041CB53 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CB59 8D45E4 lea eax, [ebp-$1C] 0041CB5C BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CB61 E866990700 call 004964CC 0041CB66 66C7856CFFFFFF6800 mov word ptr [ebp+$FFFFFF6C], $0068 0041CB6F 837DF800 cmp dword ptr [ebp-$08], +$00 0041CB73 7405 jz 0041CB7A 0041CB75 8B4DF8 mov ecx, [ebp-$08] 0041CB78 EB05 jmp 0041CB7F 0041CB7A B9C9234B00 mov ecx, $004B23C9 0041CB7F 51 push ecx 0041CB80 53 push ebx 0041CB81 33C0 xor eax, eax 0041CB83 8D55E0 lea edx, [ebp-$20] 0041CB86 8945E0 mov [ebp-$20], eax 0041CB89 52 push edx 0041CB8A FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] | 0041CB90 E8FB080000 call 0041D490 0041CB95 83C40C add esp, +$0C 0041CB98 8D55E0 lea edx, [ebp-$20] 0041CB9B 8D45F8 lea eax, [ebp-$08] * Reference to : TDengdaiForm._PROC_004964FC() | 0041CB9E E859990700 call 004964FC 0041CBA3 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CBA9 8D45E0 lea eax, [ebp-$20] 0041CBAC BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CBB1 E816990700 call 004964CC 0041CBB6 837DF800 cmp dword ptr [ebp-$08], +$00 0041CBBA 7405 jz 0041CBC1 0041CBBC 8B7DF8 mov edi, [ebp-$08] 0041CBBF EB05 jmp 0041CBC6 0041CBC1 BFCA234B00 mov edi, $004B23CA 0041CBC6 57 push edi * Reference to : TDengdaiForm._PROC_004884B8() | 0041CBC7 E8ECB80600 call 004884B8 0041CBCC 59 pop ecx 0041CBCD 898558FFFFFF mov [ebp+$FFFFFF58], eax 0041CBD3 8B8558FFFFFF mov eax, [ebp+$FFFFFF58] 0041CBD9 83C0FB add eax, -$05 0041CBDC 50 push eax 0041CBDD 57 push edi 0041CBDE 53 push ebx | 0041CBDF E84C090000 call 0041D530 0041CBE4 83C40C add esp, +$0C 0041CBE7 0FB7F0 movzx esi, ax 0041CBEA 6A05 push $05 0041CBEC 8B8558FFFFFF mov eax, [ebp+$FFFFFF58] 0041CBF2 03C7 add eax, edi 0041CBF4 83C0FB add eax, -$05 0041CBF7 50 push eax 0041CBF8 8D9554F8FFFF lea edx, [ebp+$FFFFF854] 0041CBFE 52 push edx | 0041CBFF E810B70600 call 00488314 0041CC04 C68559F8FFFF00 mov byte ptr [ebp+$FFFFF859], $00 0041CC0B 66C7856CFFFFFF7400 mov word ptr [ebp+$FFFFFF6C], $0074 0041CC14 83C40C add esp, +$0C 0041CC17 8D9554F8FFFF lea edx, [ebp+$FFFFF854] 0041CC1D 8D45DC lea eax, [ebp-$24] | 0041CC20 E8EF970700 call 00496414 0041CC25 8BD0 mov edx, eax 0041CC27 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CC2D 8D45FC lea eax, [ebp-$04] * Reference to : TDengdaiForm._PROC_004964FC() | 0041CC30 E8C7980700 call 004964FC 0041CC35 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CC3B 8D45DC lea eax, [ebp-$24] 0041CC3E BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CC43 E884980700 call 004964CC 0041CC48 8D45FC lea eax, [ebp-$04] * Reference to : TDengdaiForm._PROC_004966E0() | 0041CC4B E8909A0700 call 004966E0 0041CC50 3BF0 cmp esi, eax 0041CC52 0F8481000000 jz 0041CCD9 0041CC58 66C7856CFFFFFF8000 mov word ptr [ebp+$FFFFFF6C], $0080 * Possible String Reference to: '注册失败,请检查输入是否有误' | 0041CC61 BACB234B00 mov edx, $004B23CB 0041CC66 8D45D8 lea eax, [ebp-$28] | 0041CC69 E8A6970700 call 00496414 0041CC6E FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CC74 8B00 mov eax, [eax] * Reference to: dialogs.ShowMessage(AnsiString); | 0041CC76 E8F1930200 call 0044606C 0041CC7B FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CC81 8D45D8 lea eax, [ebp-$28] 0041CC84 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CC89 E83E980700 call 004964CC 0041CC8E FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CC94 8D45F4 lea eax, [ebp-$0C] 0041CC97 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CC9C E82B980700 call 004964CC 0041CCA1 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CCA7 8D45F8 lea eax, [ebp-$08] 0041CCAA BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CCAF E818980700 call 004964CC 0041CCB4 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CCBA 8D45FC lea eax, [ebp-$04] 0041CCBD BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CCC2 E805980700 call 004964CC 0041CCC7 8B8D5CFFFFFF mov ecx, [ebp+$FFFFFF5C] 0041CCCD 64890D00000000 mov fs:[$00000000], ecx 0041CCD4 E9AD070000 jmp 0041D486 0041CCD9 6A03 push $03 0041CCDB 8B8558FFFFFF mov eax, [ebp+$FFFFFF58] 0041CCE1 03C7 add eax, edi 0041CCE3 83C0F8 add eax, -$08 0041CCE6 50 push eax 0041CCE7 8D9554F8FFFF lea edx, [ebp+$FFFFF854] 0041CCED 52 push edx | 0041CCEE E821B60600 call 00488314 0041CCF3 C68557F8FFFF00 mov byte ptr [ebp+$FFFFF857], $00 0041CCFA 66C7856CFFFFFF8C00 mov word ptr [ebp+$FFFFFF6C], $008C 0041CD03 83C40C add esp, +$0C 0041CD06 8D9554F8FFFF lea edx, [ebp+$FFFFF854] 0041CD0C 8D45D4 lea eax, [ebp-$2C] | 0041CD0F E800970700 call 00496414 0041CD14 8BD0 mov edx, eax 0041CD16 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CD1C 8D45FC lea eax, [ebp-$04] * Reference to : TDengdaiForm._PROC_004964FC() | 0041CD1F E8D8970700 call 004964FC 0041CD24 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CD2A 8D45D4 lea eax, [ebp-$2C] 0041CD2D BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CD32 E895970700 call 004964CC 0041CD37 8D45FC lea eax, [ebp-$04] * Reference to : TDengdaiForm._PROC_004966E0() | 0041CD3A E8A1990700 call 004966E0 0041CD3F 8BF0 mov esi, eax 0041CD41 8D8554F8FFFF lea eax, [ebp+$FFFFF854] 0041CD47 56 push esi 0041CD48 57 push edi 0041CD49 50 push eax | 0041CD4A E8C5B50600 call 00488314 0041CD4F C6843554F8FFFF00 mov byte ptr [ebp+esi+$FFFFF854], $00 0041CD57 66C7856CFFFFFF9800 mov word ptr [ebp+$FFFFFF6C], $0098 0041CD60 83C40C add esp, +$0C 0041CD63 8D9554F8FFFF lea edx, [ebp+$FFFFF854] 0041CD69 8D45D0 lea eax, [ebp-$30] | 0041CD6C E8A3960700 call 00496414 0041CD71 8BD0 mov edx, eax 0041CD73 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CD79 8D45F8 lea eax, [ebp-$08] * Reference to : TDengdaiForm._PROC_004964FC() | 0041CD7C E87B970700 call 004964FC 0041CD81 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CD87 8D45D0 lea eax, [ebp-$30] 0041CD8A BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CD8F E838970700 call 004964CC 0041CD94 8B8D58FFFFFF mov ecx, [ebp+$FFFFFF58] 0041CD9A 8D043E lea eax, [esi+edi] 0041CD9D 2BCE sub ecx, esi 0041CD9F 8D9554F8FFFF lea edx, [ebp+$FFFFF854] 0041CDA5 83C1F8 add ecx, -$08 0041CDA8 51 push ecx 0041CDA9 50 push eax 0041CDAA 52 push edx | 0041CDAB E864B50600 call 00488314 0041CDB0 8B8D58FFFFFF mov ecx, [ebp+$FFFFFF58] 0041CDB6 83C40C add esp, +$0C 0041CDB9 2BCE sub ecx, esi 0041CDBB 8D9554F8FFFF lea edx, [ebp+$FFFFF854] 0041CDC1 8D45CC lea eax, [ebp-$34] 0041CDC4 C6840D4CF8FFFF00 mov byte ptr [ebp+ecx+$FFFFF84C], $00 0041CDCC 66C7856CFFFFFFA400 mov word ptr [ebp+$FFFFFF6C], $00A4 | 0041CDD5 E83A960700 call 00496414 0041CDDA 8BD0 mov edx, eax 0041CDDC FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CDE2 8D45F4 lea eax, [ebp-$0C] * Reference to : TDengdaiForm._PROC_004964FC() | 0041CDE5 E812970700 call 004964FC 0041CDEA FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CDF0 8D45CC lea eax, [ebp-$34] 0041CDF3 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CDF8 E8CF960700 call 004964CC 0041CDFD 837DF800 cmp dword ptr [ebp-$08], +$00 0041CE01 7405 jz 0041CE08 0041CE03 8B4DF8 mov ecx, [ebp-$08] 0041CE06 EB05 jmp 0041CE0D 0041CE08 B9E7234B00 mov ecx, $004B23E7 0041CE0D 8BF9 mov edi, ecx 0041CE0F 33C0 xor eax, eax 0041CE11 83C9FF or ecx, -$01 0041CE14 8DB554FDFFFF lea esi, [ebp+$FFFFFD54] 0041CE1A F2 repne 0041CE1B AE scasb 0041CE1C F7D1 not ecx 0041CE1E 2BF9 sub edi, ecx 0041CE20 8BD1 mov edx, ecx 0041CE22 87F7 xchg edi, esi 0041CE24 C1E902 shr ecx, $02 0041CE27 8BC7 mov eax, edi 0041CE29 F3 rep 0041CE2A A5 movsd 0041CE2B 8BCA mov ecx, edx 0041CE2D 83E103 and ecx, +$03 0041CE30 F3 rep 0041CE31 A4 movsb 0041CE32 837DF400 cmp dword ptr [ebp-$0C], +$00 0041CE36 7405 jz 0041CE3D 0041CE38 8B45F4 mov eax, [ebp-$0C] 0041CE3B EB05 jmp 0041CE42 0041CE3D B8E8234B00 mov eax, $004B23E8 0041CE42 8BF8 mov edi, eax 0041CE44 33C0 xor eax, eax 0041CE46 83C9FF or ecx, -$01 0041CE49 8DB554FCFFFF lea esi, [ebp+$FFFFFC54] 0041CE4F F2 repne 0041CE50 AE scasb 0041CE51 F7D1 not ecx 0041CE53 2BF9 sub edi, ecx 0041CE55 8BD1 mov edx, ecx 0041CE57 87F7 xchg edi, esi 0041CE59 C1E902 shr ecx, $02 0041CE5C 8BC7 mov eax, edi 0041CE5E F3 rep 0041CE5F A5 movsd 0041CE60 8BCA mov ecx, edx 0041CE62 83E103 and ecx, +$03 0041CE65 F3 rep 0041CE66 A4 movsb 0041CE67 A140A04B00 mov eax, dword ptr [$004BA040] 0041CE6C 8B30 mov esi, [eax] 0041CE6E 6A15 push $15 0041CE70 6A00 push $00 0041CE72 8DBE98030000 lea edi, [esi+$0398] 0041CE78 57 push edi | 0041CE79 E806B50600 call 00488384 0041CE7E 83C40C add esp, +$0C 0041CE81 8D86AD030000 lea eax, [esi+$03AD] 0041CE87 6800010000 push $00000100 0041CE8C 6A00 push $00 0041CE8E 50 push eax | 0041CE8F E8F0B40600 call 00488384 0041CE94 83C40C add esp, +$0C 0041CE97 8D96AD040000 lea edx, [esi+$04AD] 0041CE9D 6800010000 push $00000100 0041CEA2 6A00 push $00 0041CEA4 52 push edx | 0041CEA5 E8DAB40600 call 00488384 0041CEAA 83C40C add esp, +$0C 0041CEAD 33C0 xor eax, eax 0041CEAF 83C9FF or ecx, -$01 0041CEB2 56 push esi 0041CEB3 57 push edi 0041CEB4 8BF7 mov esi, edi 0041CEB6 8DBD54FEFFFF lea edi, [ebp+$FFFFFE54] 0041CEBC F2 repne 0041CEBD AE scasb 0041CEBE F7D1 not ecx 0041CEC0 2BF9 sub edi, ecx 0041CEC2 8BD1 mov edx, ecx 0041CEC4 87F7 xchg edi, esi 0041CEC6 C1E902 shr ecx, $02 0041CEC9 8BC7 mov eax, edi 0041CECB F3 rep 0041CECC A5 movsd 0041CECD 8BCA mov ecx, edx 0041CECF 83E103 and ecx, +$03 0041CED2 F3 rep 0041CED3 A4 movsb 0041CED4 5F pop edi 0041CED5 5E pop esi 0041CED6 56 push esi 0041CED7 8DBD54FDFFFF lea edi, [ebp+$FFFFFD54] 0041CEDD 8D86AD030000 lea eax, [esi+$03AD] 0041CEE3 8BF0 mov esi, eax 0041CEE5 33C0 xor eax, eax 0041CEE7 83C9FF or ecx, -$01 0041CEEA F2 repne 0041CEEB AE scasb 0041CEEC F7D1 not ecx 0041CEEE 2BF9 sub edi, ecx 0041CEF0 8BD1 mov edx, ecx 0041CEF2 87F7 xchg edi, esi 0041CEF4 C1E902 shr ecx, $02 0041CEF7 8BC7 mov eax, edi 0041CEF9 F3 rep 0041CEFA A5 movsd 0041CEFB 8BCA mov ecx, edx 0041CEFD 83E103 and ecx, +$03 0041CF00 F3 rep 0041CF01 A4 movsb 0041CF02 5E pop esi 0041CF03 33C0 xor eax, eax 0041CF05 81C6AD040000 add esi, $000004AD 0041CF0B 8DBD54FCFFFF lea edi, [ebp+$FFFFFC54] 0041CF11 56 push esi 0041CF12 83C9FF or ecx, -$01 0041CF15 F2 repne 0041CF16 AE scasb 0041CF17 F7D1 not ecx 0041CF19 2BF9 sub edi, ecx 0041CF1B 8BD1 mov edx, ecx 0041CF1D 87F7 xchg edi, esi 0041CF1F C1E902 shr ecx, $02 0041CF22 8BC7 mov eax, edi 0041CF24 F3 rep 0041CF25 A5 movsd 0041CF26 8BCA mov ecx, edx 0041CF28 83E103 and ecx, +$03 0041CF2B F3 rep 0041CF2C A4 movsb 0041CF2D A140A04B00 mov eax, dword ptr [$004BA040] 0041CF32 5E pop esi 0041CF33 8B10 mov edx, [eax] 0041CF35 52 push edx | 0041CF36 E88D24FFFF call 0040F3C8 0041CF3B 59 pop ecx 0041CF3C 3C01 cmp al, $01 0041CF3E 0F8542020000 jnz 0041D186 0041CF44 8B0D40A04B00 mov ecx, [$004BA040] 0041CF4A 8B01 mov eax, [ecx] 0041CF4C 50 push eax | 0041CF4D E8E626FFFF call 0040F638 0041CF52 59 pop ecx 0041CF53 3C01 cmp al, $01 0041CF55 0F852B020000 jnz 0041D186 0041CF5B 66C7856CFFFFFFB000 mov word ptr [ebp+$FFFFFF6C], $00B0 * Possible String Reference to: '注册成功' | 0041CF64 BAE9234B00 mov edx, $004B23E9 0041CF69 8D45C8 lea eax, [ebp-$38] | 0041CF6C E8A3940700 call 00496414 0041CF71 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CF77 8B00 mov eax, [eax] * Reference to: dialogs.ShowMessage(AnsiString); | 0041CF79 E8EE900200 call 0044606C 0041CF7E FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041CF84 8D45C8 lea eax, [ebp-$38] 0041CF87 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041CF8C E83B950700 call 004964CC 0041CF91 8B0D40A04B00 mov ecx, [$004BA040] 0041CF97 33C0 xor eax, eax 0041CF99 8B39 mov edi, [ecx] 0041CF9B B932000000 mov ecx, $00000032 0041CFA0 66C7856CFFFFFFC800 mov word ptr [ebp+$FFFFFF6C], $00C8 0041CFA9 8945C4 mov [ebp-$3C], eax 0041CFAC FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041CFB2 8B876C030000 mov eax, [edi+$036C] 0041CFB8 99 cdq 0041CFB9 F7F9 idiv ecx 0041CFBB 80C230 add dl, $30 0041CFBE 8D8550F7FFFF lea eax, [ebp+$FFFFF750] 0041CFC4 889556FFFFFF mov [ebp+$FFFFFF56], dl 0041CFCA C68557FFFFFF00 mov byte ptr [ebp+$FFFFFF57], $00 0041CFD1 6804010000 push $00000104 0041CFD6 50 push eax * Reference to: GetWindowsDirectoryA() | 0041CFD7 E838DC0800 call 004AAC14 * Possible String Reference to: '/ai4wplaydd' | 0041CFDC 68F2234B00 push $004B23F2 0041CFE1 8D9550F7FFFF lea edx, [ebp+$FFFFF750] 0041CFE7 52 push edx * Reference to : TDengdaiForm._PROC_00488428() | 0041CFE8 E83BB40600 call 00488428 0041CFED 83C408 add esp, +$08 0041CFF0 8D8D56FFFFFF lea ecx, [ebp+$FFFFFF56] 0041CFF6 51 push ecx 0041CFF7 8D8550F7FFFF lea eax, [ebp+$FFFFF750] 0041CFFD 50 push eax * Reference to : TDengdaiForm._PROC_00488428() | 0041CFFE E825B40600 call 00488428 0041D003 83C408 add esp, +$08 * Possible String Reference to: '.dat' | 0041D006 68FE234B00 push $004B23FE 0041D00B 8D9550F7FFFF lea edx, [ebp+$FFFFF750] 0041D011 52 push edx * Reference to : TDengdaiForm._PROC_00488428() | 0041D012 E811B40600 call 00488428 0041D017 83C408 add esp, +$08 0041D01A 8D9550F7FFFF lea edx, [ebp+$FFFFF750] 0041D020 8D45C0 lea eax, [ebp-$40] | 0041D023 E8EC930700 call 00496414 0041D028 8BD0 mov edx, eax 0041D02A FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D030 8D45C4 lea eax, [ebp-$3C] * Reference to : TDengdaiForm._PROC_004964FC() | 0041D033 E8C4940700 call 004964FC 0041D038 B201 mov dl, $01 0041D03A A1B4F74500 mov eax, dword ptr [$0045F7B4] | 0041D03F E8E067FEFF call 00403824 0041D044 8BF0 mov esi, eax 0041D046 BA03244B00 mov edx, $004B2403 0041D04B 8D45BC lea eax, [ebp-$44] | 0041D04E E8C1930700 call 00496414 0041D053 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D059 8B10 mov edx, [eax] 0041D05B 8BC6 mov eax, esi 0041D05D 8B08 mov ecx, [eax] 0041D05F FF5134 call dword ptr [ecx+$34] 0041D062 8D9798030000 lea edx, [edi+$0398] 0041D068 8D45B8 lea eax, [ebp-$48] | 0041D06B E8A4930700 call 00496414 0041D070 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D076 8B10 mov edx, [eax] 0041D078 8BC6 mov eax, esi 0041D07A 8B08 mov ecx, [eax] 0041D07C FF5134 call dword ptr [ecx+$34] 0041D07F 8D97AD030000 lea edx, [edi+$03AD] 0041D085 8D45B4 lea eax, [ebp-$4C] | 0041D088 E887930700 call 00496414 0041D08D FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D093 8B10 mov edx, [eax] 0041D095 8BC6 mov eax, esi 0041D097 8B08 mov ecx, [eax] 0041D099 FF5134 call dword ptr [ecx+$34] 0041D09C 8D97AD040000 lea edx, [edi+$04AD] 0041D0A2 8D45B0 lea eax, [ebp-$50] | 0041D0A5 E86A930700 call 00496414 0041D0AA FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D0B0 8B10 mov edx, [eax] 0041D0B2 8BC6 mov eax, esi 0041D0B4 8B08 mov ecx, [eax] 0041D0B6 FF5134 call dword ptr [ecx+$34] 0041D0B9 8B45C4 mov eax, [ebp-$3C] | 0041D0BC E84B930700 call 0049640C 0041D0C1 8B55C4 mov edx, [ebp-$3C] 0041D0C4 8BC6 mov eax, esi 0041D0C6 8B08 mov ecx, [eax] 0041D0C8 FF5164 call dword ptr [ecx+$64] 0041D0CB 8BFE mov edi, esi 0041D0CD 897DA8 mov [ebp-$58], edi 0041D0D0 85FF test edi, edi 0041D0D2 7424 jz 0041D0F8 0041D0D4 8B07 mov eax, [edi] 0041D0D6 8945AC mov [ebp-$54], eax 0041D0D9 66C7856CFFFFFFD400 mov word ptr [ebp+$FFFFFF6C], $00D4 0041D0E2 BA03000000 mov edx, $00000003 0041D0E7 8B45A8 mov eax, [ebp-$58] 0041D0EA 8B08 mov ecx, [eax] 0041D0EC FF51FC call dword ptr [ecx-$04] 0041D0EF 66C7856CFFFFFFC800 mov word ptr [ebp+$FFFFFF6C], $00C8 0041D0F8 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D0FE 8D45B0 lea eax, [ebp-$50] 0041D101 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D106 E8C1930700 call 004964CC 0041D10B FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D111 8D45B4 lea eax, [ebp-$4C] 0041D114 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D119 E8AE930700 call 004964CC 0041D11E FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D124 8D45B8 lea eax, [ebp-$48] 0041D127 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D12C E89B930700 call 004964CC 0041D131 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D137 8D45BC lea eax, [ebp-$44] 0041D13A BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D13F E888930700 call 004964CC 0041D144 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D14A 8D45C0 lea eax, [ebp-$40] 0041D14D BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D152 E875930700 call 004964CC 0041D157 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D15D 8D45C4 lea eax, [ebp-$3C] 0041D160 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D165 E862930700 call 004964CC 0041D16A 66C7856CFFFFFFBC00 mov word ptr [ebp+$FFFFFF6C], $00BC 0041D173 C6830803000001 mov byte ptr [ebx+$0308], $01 0041D17A 8BC3 mov eax, ebx * Reference to: forms.TCustomForm.Close(TCustomForm); | 0041D17C E8D70E0200 call 0043E058 0041D181 E918020000 jmp 0041D39E 0041D186 8B1540A04B00 mov edx, [$004BA040] 0041D18C 33C0 xor eax, eax 0041D18E B932000000 mov ecx, $00000032 0041D193 8B32 mov esi, [edx] 0041D195 66C7856CFFFFFFEC00 mov word ptr [ebp+$FFFFFF6C], $00EC 0041D19E 8945A4 mov [ebp-$5C], eax 0041D1A1 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D1A7 8B866C030000 mov eax, [esi+$036C] 0041D1AD 99 cdq 0041D1AE F7F9 idiv ecx 0041D1B0 80C230 add dl, $30 0041D1B3 8D854CF6FFFF lea eax, [ebp+$FFFFF64C] 0041D1B9 889554FFFFFF mov [ebp+$FFFFFF54], dl 0041D1BF C68555FFFFFF00 mov byte ptr [ebp+$FFFFFF55], $00 0041D1C6 6804010000 push $00000104 0041D1CB 50 push eax * Reference to: GetWindowsDirectoryA() | 0041D1CC E843DA0800 call 004AAC14 * Possible String Reference to: '/ai4wplaydd' | 0041D1D1 6804244B00 push $004B2404 0041D1D6 8D954CF6FFFF lea edx, [ebp+$FFFFF64C] 0041D1DC 52 push edx * Reference to : TDengdaiForm._PROC_00488428() | 0041D1DD E846B20600 call 00488428 0041D1E2 83C408 add esp, +$08 0041D1E5 8D8D54FFFFFF lea ecx, [ebp+$FFFFFF54] 0041D1EB 51 push ecx 0041D1EC 8D854CF6FFFF lea eax, [ebp+$FFFFF64C] 0041D1F2 50 push eax * Reference to : TDengdaiForm._PROC_00488428() | 0041D1F3 E830B20600 call 00488428 0041D1F8 83C408 add esp, +$08 * Possible String Reference to: '.dat' | 0041D1FB 6810244B00 push $004B2410 0041D200 8D954CF6FFFF lea edx, [ebp+$FFFFF64C] 0041D206 52 push edx * Reference to : TDengdaiForm._PROC_00488428() | 0041D207 E81CB20600 call 00488428 0041D20C 83C408 add esp, +$08 0041D20F 8D954CF6FFFF lea edx, [ebp+$FFFFF64C] 0041D215 8D45A0 lea eax, [ebp-$60] | 0041D218 E8F7910700 call 00496414 0041D21D 8BD0 mov edx, eax 0041D21F FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D225 8D45A4 lea eax, [ebp-$5C] * Reference to : TDengdaiForm._PROC_004964FC() | 0041D228 E8CF920700 call 004964FC 0041D22D B201 mov dl, $01 0041D22F A1B4F74500 mov eax, dword ptr [$0045F7B4] | 0041D234 E8EB65FEFF call 00403824 0041D239 8BD8 mov ebx, eax 0041D23B BA15244B00 mov edx, $004B2415 0041D240 8D459C lea eax, [ebp-$64] | 0041D243 E8CC910700 call 00496414 0041D248 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D24E 8B10 mov edx, [eax] 0041D250 8BC3 mov eax, ebx 0041D252 8B08 mov ecx, [eax] 0041D254 FF5134 call dword ptr [ecx+$34] 0041D257 8D9698030000 lea edx, [esi+$0398] 0041D25D 8D4598 lea eax, [ebp-$68] | 0041D260 E8AF910700 call 00496414 0041D265 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D26B 8B10 mov edx, [eax] 0041D26D 8BC3 mov eax, ebx 0041D26F 8B08 mov ecx, [eax] 0041D271 FF5134 call dword ptr [ecx+$34] 0041D274 8D96AD030000 lea edx, [esi+$03AD] 0041D27A 8D4594 lea eax, [ebp-$6C] | 0041D27D E892910700 call 00496414 0041D282 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D288 8B10 mov edx, [eax] 0041D28A 8BC3 mov eax, ebx 0041D28C 8B08 mov ecx, [eax] 0041D28E FF5134 call dword ptr [ecx+$34] 0041D291 8D96AD040000 lea edx, [esi+$04AD] 0041D297 8D4590 lea eax, [ebp-$70] | 0041D29A E875910700 call 00496414 0041D29F FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D2A5 8B10 mov edx, [eax] 0041D2A7 8BC3 mov eax, ebx 0041D2A9 8B08 mov ecx, [eax] 0041D2AB FF5134 call dword ptr [ecx+$34] 0041D2AE 8B45A4 mov eax, [ebp-$5C] | 0041D2B1 E856910700 call 0049640C 0041D2B6 8B55A4 mov edx, [ebp-$5C] 0041D2B9 8BC3 mov eax, ebx 0041D2BB 8B08 mov ecx, [eax] 0041D2BD FF5164 call dword ptr [ecx+$64] 0041D2C0 8BF3 mov esi, ebx 0041D2C2 897588 mov [ebp-$78], esi 0041D2C5 85F6 test esi, esi 0041D2C7 7424 jz 0041D2ED 0041D2C9 8B06 mov eax, [esi] 0041D2CB 89458C mov [ebp-$74], eax 0041D2CE 66C7856CFFFFFFF800 mov word ptr [ebp+$FFFFFF6C], $00F8 0041D2D7 BA03000000 mov edx, $00000003 0041D2DC 8B4588 mov eax, [ebp-$78] 0041D2DF 8B08 mov ecx, [eax] 0041D2E1 FF51FC call dword ptr [ecx-$04] 0041D2E4 66C7856CFFFFFFEC00 mov word ptr [ebp+$FFFFFF6C], $00EC 0041D2ED FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D2F3 8D4590 lea eax, [ebp-$70] 0041D2F6 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D2FB E8CC910700 call 004964CC 0041D300 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D306 8D4594 lea eax, [ebp-$6C] 0041D309 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D30E E8B9910700 call 004964CC 0041D313 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D319 8D4598 lea eax, [ebp-$68] 0041D31C BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D321 E8A6910700 call 004964CC 0041D326 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D32C 8D459C lea eax, [ebp-$64] 0041D32F BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D334 E893910700 call 004964CC 0041D339 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D33F 8D45A0 lea eax, [ebp-$60] 0041D342 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D347 E880910700 call 004964CC 0041D34C FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D352 8D45A4 lea eax, [ebp-$5C] 0041D355 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D35A E86D910700 call 004964CC 0041D35F 66C7856CFFFFFFE000 mov word ptr [ebp+$FFFFFF6C], $00E0 0041D368 66C7856CFFFFFF0401 mov word ptr [ebp+$FFFFFF6C], $0104 * Possible String Reference to: '注册失败,请检查' | 0041D371 BA16244B00 mov edx, $004B2416 0041D376 8D4584 lea eax, [ebp-$7C] | 0041D379 E896900700 call 00496414 0041D37E FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D384 8B00 mov eax, [eax] * Reference to: dialogs.ShowMessage(AnsiString); | 0041D386 E8E18C0200 call 0044606C 0041D38B FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D391 8D4584 lea eax, [ebp-$7C] 0041D394 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D399 E82E910700 call 004964CC 0041D39E 66C7856CFFFFFF1400 mov word ptr [ebp+$FFFFFF6C], $0014 0041D3A7 E994000000 jmp 0041D440 0041D3AC 66C7856CFFFFFF1001 mov word ptr [ebp+$FFFFFF6C], $0110 * Possible String Reference to: '注册失败,请检查输入是否有误' | 0041D3B5 BA26244B00 mov edx, $004B2426 0041D3BA 8D4580 lea eax, [ebp-$80] | 0041D3BD E852900700 call 00496414 0041D3C2 FF8578FFFFFF inc dword ptr [ebp+$FFFFFF78] 0041D3C8 8B00 mov eax, [eax] * Reference to: dialogs.ShowMessage(AnsiString); | 0041D3CA E89D8C0200 call 0044606C 0041D3CF FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D3D5 8D4580 lea eax, [ebp-$80] 0041D3D8 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D3DD E8EA900700 call 004964CC 0041D3E2 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D3E8 8D45F4 lea eax, [ebp-$0C] 0041D3EB BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D3F0 E8D7900700 call 004964CC 0041D3F5 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D3FB 8D45F8 lea eax, [ebp-$08] 0041D3FE BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D403 E8C4900700 call 004964CC 0041D408 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D40E 8D45FC lea eax, [ebp-$04] 0041D411 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D416 E8B1900700 call 004964CC 0041D41B 33C9 xor ecx, ecx 0041D41D 898D78FFFFFF mov [ebp+$FFFFFF78], ecx 0041D423 8D855CFFFFFF lea eax, [ebp+$FFFFFF5C] 0041D429 50 push eax * Reference to : TDengdaiForm._PROC_00493BC3() | 0041D42A E894670700 call 00493BC3 0041D42F 59 pop ecx 0041D430 EB54 jmp 0041D486 0041D432 66C7856CFFFFFF5800 mov word ptr [ebp+$FFFFFF6C], $0058 * Reference to : TDengdaiForm._PROC_0049350E() | 0041D43B E8CE600700 call 0049350E 0041D440 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D446 8D45F4 lea eax, [ebp-$0C] 0041D449 BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D44E E879900700 call 004964CC 0041D453 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D459 8D45F8 lea eax, [ebp-$08] 0041D45C BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D461 E866900700 call 004964CC 0041D466 FF8D78FFFFFF dec dword ptr [ebp+$FFFFFF78] 0041D46C 8D45FC lea eax, [ebp-$04] 0041D46F BA02000000 mov edx, $00000002 * Reference to : TDengdaiForm._PROC_004964CC() | 0041D474 E853900700 call 004964CC 0041D479 8B8D5CFFFFFF mov ecx, [ebp+$FFFFFF5C] 0041D47F 64890D00000000 mov fs:[$00000000], ecx 0041D486 5F pop edi 0041D487 5E pop esi 0041D488 5B pop ebx 0041D489 8BE5 mov esp, ebp 0041D48B 5D pop ebp 0041D48C C3 ret 麻烦高手们看看是不是算法所在，为什么用od不能跟踪，请教了？ |
|
|
晕，下断，跟进Call里去
|
|
|
赞赏
雪币:
留言:
