刚下载,大致看了下流程(4个时钟timer事件)。。。
反调试的方式:
004053AD 55 push ebp //改为 C3 Retn 便可以了!
004053AE 8BEC mov ebp, esp
004053B0 81EC 10000000 sub esp, 10
004053B6 FF75 08 push dword ptr [ebp+8]
004053B9 E8 DA000000 call 00405498
004053BE E8 0A020000 call 004055CD
004053C3 33C9 xor ecx, ecx
004053C5 41 inc ecx
004053C6 51 push ecx
004053C7 50 push eax
004053C8 3BC8 cmp ecx, eax
004053CA 0F8F BF000000 jg 0040548F
004053D0 68 00000000 push 0
004053D5 > BB 04010000 mov ebx, 104 ; 取运行目录(系统核心支持库)
004053DA > E8 750C0000 call 00406054 ; 调用核心支持库命令(调用3号服务)
004053DF 83C4 04 add esp, 4
004053E2 8945 FC mov dword ptr [ebp-4], eax
004053E5 68 00000000 push 0
004053EA > BB 08010000 mov ebx, 108 ; 取执行文件名(系统核心支持库)
004053EF > E8 600C0000 call 00406054 ; 调用核心支持库命令(调用3号服务)
004053F4 83C4 04 add esp, 4
004053F7 8945 F8 mov dword ptr [ebp-8], eax
004053FA FF75 F8 push dword ptr [ebp-8]
004053FD > 68 5F344000 push 0040345F ; \(常量)
00405402 FF75 FC push dword ptr [ebp-4]
00405405 B9 03000000 mov ecx, 3
0040540A E8 32EFFFFF call 00404341
0040540F 83C4 0C add esp, 0C
00405412 8945 F4 mov dword ptr [ebp-C], eax
00405415 8B5D FC mov ebx, dword ptr [ebp-4]
00405418 85DB test ebx, ebx
0040541A 74 09 je short 00405425
0040541C 53 push ebx
0040541D > E8 260C0000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00405422 83C4 04 add esp, 4
00405425 8B5D F8 mov ebx, dword ptr [ebp-8]
00405428 85DB test ebx, ebx
0040542A 74 09 je short 00405435
0040542C 53 push ebx
0040542D > E8 160C0000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00405432 83C4 04 add esp, 4
00405435 8965 F0 mov dword ptr [ebp-10], esp
00405438 68 01000000 push 1
0040543D FF75 F4 push dword ptr [ebp-C]
00405440 > B8 01000000 mov eax, 1 ; WinExec(<未知库名>)
00405445 > E8 220C0000 call 0040606C ; 调用外部动态链接库命令(调用1号服务)
0040544A 3965 F0 cmp dword ptr [ebp-10], esp
0040544D 74 0D je short 0040545C
0040544F 68 06000000 push 6
00405454 > E8 010C0000 call 0040605A ; 调用Runtime内部异常处理(调用0号服务)
00405459 83C4 04 add esp, 4
0040545C 8B5D F4 mov ebx, dword ptr [ebp-C]
0040545F 85DB test ebx, ebx
00405461 74 09 je short 0040546C
00405463 53 push ebx
00405464 > E8 DF0B0000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00405469 83C4 04 add esp, 4
0040546C 68 00000000 push 0
00405471 > BB 50030000 mov ebx, 350 ; 处理事件(系统核心支持库)
00405476 > E8 D90B0000 call 00406054 ; 调用核心支持库命令(调用3号服务)
0040547B 83C4 04 add esp, 4
0040547E 6A 00 push 0
00405480 > E8 AB0B0000 call 00406030 ; 结束当前程序进程(调用9号服务)
00405485 83C4 04 add esp, 4
00405488 58 pop eax
00405489 59 pop ecx
0040548A ^ E9 36FFFFFF jmp 004053C5
0040548F 83C4 08 add esp, 8
00405492 8BE5 mov esp, ebp
00405494 5D pop ebp
00405495 C2 0400 retn 4
得到机器码的方式:
00404CC4 55 push ebp
00404CC5 8BEC mov ebp, esp
00404CC7 81EC 20000000 sub esp, 20
00404CCD C745 FC 0000000>mov dword ptr [ebp-4], 0
00404CD4 C745 F8 0000000>mov dword ptr [ebp-8], 0
00404CDB C745 F4 0000000>mov dword ptr [ebp-C], 0
00404CE2 C745 F0 0000000>mov dword ptr [ebp-10], 0
00404CE9 > B8 8A334000 mov eax, 0040338A ; c:\(常量)
00404CEE 50 push eax
00404CEF 8B5D FC mov ebx, dword ptr [ebp-4]
00404CF2 85DB test ebx, ebx
00404CF4 74 09 je short 00404CFF
00404CF6 53 push ebx
00404CF7 > E8 4C130000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404CFC 83C4 04 add esp, 4
00404CFF 58 pop eax
00404D00 8945 FC mov dword ptr [ebp-4], eax
00404D03 > 68 01030080 push 80000301 ; 整数型(基本数据类型)
00404D08 6A 00 push 0
00404D0A 68 FF000000 push 0FF
00404D0F 68 01000000 push 1
00404D14 > BB 84010000 mov ebx, 184 ; 取空白文本(系统核心支持库)
00404D19 > E8 36130000 call 00406054 ; 调用核心支持库命令(调用3号服务)
00404D1E 83C4 10 add esp, 10
00404D21 8945 EC mov dword ptr [ebp-14], eax
00404D24 8B45 EC mov eax, dword ptr [ebp-14]
00404D27 50 push eax
00404D28 8B5D F8 mov ebx, dword ptr [ebp-8]
00404D2B 85DB test ebx, ebx
00404D2D 74 09 je short 00404D38
00404D2F 53 push ebx
00404D30 > E8 13130000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404D35 83C4 04 add esp, 4
00404D38 58 pop eax
00404D39 8945 F8 mov dword ptr [ebp-8], eax
00404D3C > 68 01030080 push 80000301 ; 整数型(基本数据类型)
00404D41 6A 00 push 0
00404D43 68 FF000000 push 0FF
00404D48 68 01000000 push 1
00404D4D > BB 84010000 mov ebx, 184 ; 取空白文本(系统核心支持库)
00404D52 > E8 FD120000 call 00406054 ; 调用核心支持库命令(调用3号服务)
00404D57 83C4 10 add esp, 10
00404D5A 8945 EC mov dword ptr [ebp-14], eax
00404D5D 8B45 EC mov eax, dword ptr [ebp-14]
00404D60 50 push eax
00404D61 8B5D F4 mov ebx, dword ptr [ebp-C]
00404D64 85DB test ebx, ebx
00404D66 74 09 je short 00404D71
00404D68 53 push ebx
00404D69 > E8 DA120000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404D6E 83C4 04 add esp, 4
00404D71 58 pop eax
00404D72 8945 F4 mov dword ptr [ebp-C], eax
00404D75 68 00000000 push 0
00404D7A > BB C4060000 mov ebx, 6C4 ; 取硬盘特征字(系统核心支持库)
00404D7F > E8 D0120000 call 00406054 ; 调用核心支持库命令(调用3号服务)
00404D84 83C4 04 add esp, 4
00404D87 8945 F0 mov dword ptr [ebp-10], eax
00404D8A 837D F0 00 cmp dword ptr [ebp-10], 0
00404D8E 0F85 40000000 jnz <整数型(基本数据类型)>
00404D94 8965 EC mov dword ptr [ebp-14], esp
00404D97 68 FF000000 push 0FF
00404D9C FF75 F8 push dword ptr [ebp-8]
00404D9F 68 00000000 push 0
00404DA4 68 00000000 push 0
00404DA9 8D45 F0 lea eax, dword ptr [ebp-10]
00404DAC 50 push eax
00404DAD 68 FF000000 push 0FF
00404DB2 FF75 F4 push dword ptr [ebp-C]
00404DB5 FF75 FC push dword ptr [ebp-4]
00404DB8 > B8 00000000 mov eax, 0 ; GetVolumeInformationA(<未知库名>)
00404DBD > E8 AA120000 call 0040606C ; 调用外部动态链接库命令(调用1号服务)
00404DC2 3965 EC cmp dword ptr [ebp-14], esp
00404DC5 74 0D je short <整数型(基本数据类型)>
00404DC7 68 06000000 push 6
00404DCC > E8 89120000 call 0040605A ; 调用Runtime内部异常处理(调用0号服务)
00404DD1 83C4 04 add esp, 4
00404DD4 > 68 01030080 push 80000301 ; 整数型(基本数据类型)
00404DD9 6A 00 push 0
00404DDB FF75 F0 push dword ptr [ebp-10]
00404DDE 68 01000000 push 1
00404DE3 > BB 98010000 mov ebx, 198 ; 到字节集(系统核心支持库)
00404DE8 > E8 67120000 call 00406054 ; 调用核心支持库命令(调用3号服务)
00404DED 83C4 10 add esp, 10
00404DF0 8945 EC mov dword ptr [ebp-14], eax
00404DF3 > 68 05000080 push 80000005 ; 字节集(基本数据类型)
00404DF8 6A 00 push 0
00404DFA 8B45 EC mov eax, dword ptr [ebp-14]
00404DFD 85C0 test eax, eax
00404DFF 75 05 jnz short 00404E06
00404E01 > B8 A8324000 mov eax, 004032A8 ; (常量)
00404E06 50 push eax
00404E07 68 01000000 push 1
00404E0C > BB 08000000 mov ebx, 8 ; 取数据摘要(数据操作支持库一)
00404E11 B8 01000000 mov eax, 1
00404E16 > E8 4B120000 call 00406066 ; 调用其他支持库命令(调用2号服务)
00404E1B 83C4 10 add esp, 10
00404E1E 8945 E8 mov dword ptr [ebp-18], eax
00404E21 8B5D EC mov ebx, dword ptr [ebp-14]
00404E24 85DB test ebx, ebx
00404E26 74 09 je short <文本型(基本数据类型)>
00404E28 53 push ebx
00404E29 > E8 1A120000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404E2E 83C4 04 add esp, 4
00404E31 > 68 04000080 push 80000004 ; 文本型(基本数据类型)
00404E36 6A 00 push 0
00404E38 8B45 E8 mov eax, dword ptr [ebp-18]
00404E3B 85C0 test eax, eax
00404E3D 75 05 jnz short 00404E44
00404E3F > B8 A1314000 mov eax, 004031A1 ; (常量)
00404E44 50 push eax
00404E45 68 01000000 push 1
00404E4A > BB 50010000 mov ebx, 150 ; 到大写(系统核心支持库)
00404E4F > E8 00120000 call 00406054 ; 调用核心支持库命令(调用3号服务)
00404E54 83C4 10 add esp, 10
00404E57 8945 E4 mov dword ptr [ebp-1C], eax
00404E5A 8B5D E8 mov ebx, dword ptr [ebp-18]
00404E5D 85DB test ebx, ebx
00404E5F 74 09 je short <整数型(基本数据类型)>
00404E61 53 push ebx
00404E62 > E8 E1110000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404E67 83C4 04 add esp, 4
00404E6A > 68 01030080 push 80000301 ; 整数型(基本数据类型)
00404E6F 6A 00 push 0
00404E71 68 0A000000 push 0A
00404E76 > 68 04000080 push 80000004 ; 文本型(基本数据类型)
00404E7B 6A 00 push 0
00404E7D 8B45 E4 mov eax, dword ptr [ebp-1C]
00404E80 85C0 test eax, eax
00404E82 75 05 jnz short 00404E89
00404E84 > B8 A1314000 mov eax, 004031A1 ; (常量)
00404E89 50 push eax
00404E8A 68 02000000 push 2
00404E8F > BB 34010000 mov ebx, 134 ; 取文本左边(系统核心支持库)
00404E94 > E8 BB110000 call 00406054 ; 调用核心支持库命令(调用3号服务)
00404E99 83C4 1C add esp, 1C
00404E9C 8945 E0 mov dword ptr [ebp-20], eax
00404E9F 8B5D E4 mov ebx, dword ptr [ebp-1C]
00404EA2 85DB test ebx, ebx
00404EA4 74 09 je short 00404EAF
00404EA6 53 push ebx
00404EA7 > E8 9C110000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404EAC 83C4 04 add esp, 4
00404EAF 8B45 E0 mov eax, dword ptr [ebp-20]
00404EB2 E9 00000000 jmp 00404EB7
00404EB7 50 push eax
00404EB8 8B5D FC mov ebx, dword ptr [ebp-4]
00404EBB 85DB test ebx, ebx
00404EBD 74 09 je short 00404EC8
00404EBF 53 push ebx
00404EC0 > E8 83110000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404EC5 83C4 04 add esp, 4
00404EC8 8B5D F8 mov ebx, dword ptr [ebp-8]
00404ECB 85DB test ebx, ebx
00404ECD 74 09 je short 00404ED8
00404ECF 53 push ebx
00404ED0 > E8 73110000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404ED5 83C4 04 add esp, 4
00404ED8 8B5D F4 mov ebx, dword ptr [ebp-C]
00404EDB 85DB test ebx, ebx
00404EDD 74 09 je short 00404EE8
00404EDF 53 push ebx
00404EE0 > E8 63110000 call 00406048 ; 销毁从堆上分配到的内存(调用8号服务)
00404EE5 83C4 04 add esp, 4
00404EE8 58 pop eax
00404EE9 8BE5 mov esp, ebp
00404EEB 5D pop ebp
00404EEC C3 retn
窗体创建事件:::00404F8A:: 55 PUSH EBP
::00404F8B:: 8BEC MOV EBP,ESP
::00404F8D:: 81EC 28000000 SUB ESP,28
::00404F93:: C745 FC 00000000 MOV DWORD PTR [EBP-4],0
::00404F9A:: 68 04000000 PUSH 4
::00404F9F:: E8 09040000 CALL 004053AD
::00404FA4:: E8 1BFDFFFF CALL 00404CC4
::00404FA9:: 8945 F8 MOV [EBP-8],EAX
::00404FAC:: 6A 00 PUSH 0
::00404FAE:: FF75 F8 PUSH DWORD PTR [EBP-8]
::00404FB1:: 6A FF PUSH -1
::00404FB3:: 6A 08 PUSH 8 内容(“编辑框1”的属性)
::00404FB5:: 68 02000116 PUSH 16010002 编辑框1(编辑框)
::00404FBA:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404FBF:: E8 AE100000 CALL 00406072 修改窗体对象属性(调用5号服务)
::00404FC4:: 83C4 18 ADD ESP,18
::00404FC7:: 8B5D F8 MOV EBX,[EBP-8]
::00404FCA:: 85DB TEST EBX,EBX
::00404FCC:: 74 09 JE SHORT 00404FD7
::00404FCE:: 53 PUSH EBX
::00404FCF:: E8 74100000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404FD4:: 83C4 04 ADD ESP,4
::00404FD7:: 68 00000000 PUSH 0
::00404FDC:: BB 04010000 MOV EBX,104 取运行目录(系统核心支持库)
::00404FE1:: E8 6E100000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404FE6:: 83C4 04 ADD ESP,4
::00404FE9:: 8945 F8 MOV [EBP-8],EAX
::00404FEC:: 68 8E334000 PUSH 40338E \key.dll(常量)
::00404FF1:: FF75 F8 PUSH DWORD PTR [EBP-8]
::00404FF4:: B9 02000000 MOV ECX,2
::00404FF9:: E8 43F3FFFF CALL 00404341
::00404FFE:: 83C4 08 ADD ESP,8
::00405001:: 8945 F4 MOV [EBP-C],EAX
::00405004:: 8B5D F8 MOV EBX,[EBP-8]
::00405007:: 85DB TEST EBX,EBX
::00405009:: 74 09 JE SHORT 00405014
::0040500B:: 53 PUSH EBX
::0040500C:: E8 37100000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00405011:: 83C4 04 ADD ESP,4
::00405014:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::00405019:: 6A 00 PUSH 0
::0040501B:: 8B45 F4 MOV EAX,[EBP-C]
::0040501E:: 85C0 TEST EAX,EAX
::00405020:: 75 05 JNZ SHORT 00405027
::00405022:: B8 A1314000 MOV EAX,4031A1 (常量)
::00405027:: 50 PUSH EAX
::00405028:: 68 01000000 PUSH 1
::0040502D:: BB 68020000 MOV EBX,268 读入文件(系统核心支持库)
::00405032:: E8 1D100000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405037:: 83C4 10 ADD ESP,10
::0040503A:: 8945 F0 MOV [EBP-10],EAX
::0040503D:: 8B5D F4 MOV EBX,[EBP-C]
::00405040:: 85DB TEST EBX,EBX
::00405042:: 74 09 JE SHORT 0040504D
::00405044:: 53 PUSH EBX
::00405045:: E8 FE0F0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::0040504A:: 83C4 04 ADD ESP,4
::0040504D:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::00405052:: 6A 00 PUSH 0
::00405054:: 8B45 F0 MOV EAX,[EBP-10]
::00405057:: 85C0 TEST EAX,EAX
::00405059:: 75 05 JNZ SHORT 00405060
::0040505B:: B8 A8324000 MOV EAX,4032A8 (常量)
::00405060:: 50 PUSH EAX
::00405061:: 68 01000000 PUSH 1
::00405066:: BB 68010000 MOV EBX,168 到文本(系统核心支持库)
::0040506B:: E8 E40F0000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405070:: 83C4 10 ADD ESP,10
::00405073:: 8945 EC MOV [EBP-14],EAX
::00405076:: 8B5D F0 MOV EBX,[EBP-10]
::00405079:: 85DB TEST EBX,EBX
::0040507B:: 74 09 JE SHORT 00405086
::0040507D:: 53 PUSH EBX
::0040507E:: E8 C50F0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00405083:: 83C4 04 ADD ESP,4
::00405086:: 6A 00 PUSH 0
::00405088:: FF75 EC PUSH DWORD PTR [EBP-14]
::0040508B:: 6A FF PUSH -1
::0040508D:: 6A 08 PUSH 8 内容(“编辑框2”的属性)
::0040508F:: 68 03000116 PUSH 16010003 编辑框2(编辑框)
::00405094:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00405099:: E8 D40F0000 CALL 00406072 修改窗体对象属性(调用5号服务)
::0040509E:: 83C4 18 ADD ESP,18
::004050A1:: 8B5D EC MOV EBX,[EBP-14]
::004050A4:: 85DB TEST EBX,EBX
::004050A6:: 74 09 JE SHORT 004050B1
::004050A8:: 53 PUSH EBX
::004050A9:: E8 9A0F0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::004050AE:: 83C4 04 ADD ESP,4
::004050B1:: C705 98059B00 33000000 MOV DWORD PTR [9B0598],33
::004050BB:: 8B1D 94059B00 MOV EBX,[9B0594]
::004050C1:: E8 5EF0FFFF CALL 00404124
::004050C6:: B8 57000000 MOV EAX,57
::004050CB:: 3BC1 CMP EAX,ECX
::004050CD:: 7C 0D JL SHORT 004050DC
::004050CF:: 68 01000000 PUSH 1
::004050D4:: E8 810F0000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::004050D9:: 83C4 04 ADD ESP,4
::004050DC:: C1E0 02 SHL EAX,2
::004050DF:: 03D8 ADD EBX,EAX
::004050E1:: 895D F8 MOV [EBP-8],EBX
::004050E4:: 8B5D F8 MOV EBX,[EBP-8]
::004050E7:: C703 01000000 MOV DWORD PTR [EBX],1
::004050ED:: 33C9 XOR ECX,ECX
::004050EF:: 8D45 FC LEA EAX,[EBP-4]
::004050F2:: 8BD8 MOV EBX,EAX
::004050F4:: 41 INC ECX
::004050F5:: 51 PUSH ECX
::004050F6:: 53 PUSH EBX
::004050F7:: 890B MOV [EBX],ECX
::004050F9:: 81F9 E8030000 CMP ECX,3E8
::004050FF:: 0F8F E7000000 JG 004051EC
::00405105:: DB05 98059B00 FILD DWORD PTR [9B0598]
::0040510B:: DD5D F4 FSTP QWORD PTR [EBP-C]
::0040510E:: DD45 F4 FLD QWORD PTR [EBP-C]
::00405111:: DB05 98059B00 FILD DWORD PTR [9B0598]
::00405117:: DD5D EC FSTP QWORD PTR [EBP-14]
::0040511A:: DC45 EC FADD QWORD PTR [EBP-14]
::0040511D:: DD5D E4 FSTP QWORD PTR [EBP-1C]
::00405120:: DB45 FC FILD DWORD PTR [EBP-4]
::00405123:: DD5D DC FSTP QWORD PTR [EBP-24]
::00405126:: DD45 DC FLD QWORD PTR [EBP-24]
::00405129:: DC65 E4 FSUB QWORD PTR [EBP-1C]
::0040512C:: D9E4 FTST
::0040512E:: DFE0 FSTSW AX
::00405130:: F6C4 01 TEST AH,1
::00405133:: 74 02 JE SHORT 00405137
::00405135:: D9E0 FCHS
::00405137:: DC1D 97334000 FCOMP QWORD PTR [403397]
::0040513D:: DFE0 FSTSW AX
::0040513F:: F6C4 41 TEST AH,41
::00405142:: 0F84 40000000 JE 00405188
::00405148:: 6A FF PUSH -1
::0040514A:: 6A 08 PUSH 8 内容(“编辑框2”的属性)
::0040514C:: 68 03000116 PUSH 16010003 编辑框2(编辑框)
::00405151:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00405156:: E8 050F0000 CALL 00406060 取窗体对象属性(调用4号服务)
::0040515B:: 83C4 10 ADD ESP,10
::0040515E:: 8945 F8 MOV [EBP-8],EAX
::00405161:: 8B45 F8 MOV EAX,[EBP-8]
::00405164:: 50 PUSH EAX
::00405165:: 8B1D 9C059B00 MOV EBX,[9B059C]
::0040516B:: 85DB TEST EBX,EBX
::0040516D:: 74 09 JE SHORT 00405178
::0040516F:: 53 PUSH EBX
::00405170:: E8 D30E0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00405175:: 83C4 04 ADD ESP,4
::00405178:: 58 POP EAX
::00405179:: A3 9C059B00 MOV [9B059C],EAX
::0040517E:: E9 69000000 JMP 004051EC
::00405183:: E9 5D000000 JMP 004051E5
::00405188:: B8 9F334000 MOV EAX,40339F 注册成功!(常量)
::0040518D:: 50 PUSH EAX
::0040518E:: 8B1D 9C059B00 MOV EBX,[9B059C]
::00405194:: 85DB TEST EBX,EBX
::00405196:: 74 09 JE SHORT 004051A1
::00405198:: 53 PUSH EBX
::00405199:: E8 AA0E0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::0040519E:: 83C4 04 ADD ESP,4
::004051A1:: 58 POP EAX
::004051A2:: A3 9C059B00 MOV [9B059C],EAX
::004051A7:: B8 A9334000 MOV EAX,4033A9 注册码不正确(常量)
::004051AC:: 50 PUSH EAX
::004051AD:: 8B1D 9C059B00 MOV EBX,[9B059C]
::004051B3:: 85DB TEST EBX,EBX
::004051B5:: 74 09 JE SHORT 004051C0
::004051B7:: 53 PUSH EBX
::004051B8:: E8 8B0E0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::004051BD:: 83C4 04 ADD ESP,4
::004051C0:: 58 POP EAX
::004051C1:: A3 9C059B00 MOV [9B059C],EAX
::004051C6:: B8 B6334000 MOV EAX,4033B6 注册失败!(常量)
::004051CB:: 50 PUSH EAX
::004051CC:: 8B1D 9C059B00 MOV EBX,[9B059C]
::004051D2:: 85DB TEST EBX,EBX
::004051D4:: 74 09 JE SHORT 004051DF
::004051D6:: 53 PUSH EBX
::004051D7:: E8 6C0E0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::004051DC:: 83C4 04 ADD ESP,4
::004051DF:: 58 POP EAX
::004051E0:: A3 9C059B00 MOV [9B059C],EAX
::004051E5:: 5B POP EBX
::004051E6:: 59 POP ECX
::004051E7:: E9 08 JMP 004050F4
::004051EC:: 83C4 08 ADD ESP,8
::004051EF:: E8 D0FAFFFF CALL 00404CC4
::004051F4:: 8945 F8 MOV [EBP-8],EAX
::004051F7:: 68 01000100 PUSH 10001
::004051FC:: 68 00000106 PUSH 6010000 窗口1(窗口)
::00405201:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00405206:: 68 01000000 PUSH 1
::0040520B:: BB 5C030000 MOV EBX,35C 取窗口句柄(系统核心支持库)
::00405210:: E8 3F0E0000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405215:: 83C4 10 ADD ESP,10
::00405218:: 50 PUSH EAX
::00405219:: 68 9C059B00 PUSH 9B059C
::0040521E:: 8D45 F8 LEA EAX,[EBP-8]
::00405221:: 50 PUSH EAX
::00405222:: B8 A2314000 MOV EAX,4031A2 C5167F58C9FDD9B22187F665843ED3594667AD7BBCC14AA4BC24B20CAD98CFEA44ECEF91B289F99B093F980FCB3B56645696472ED38374E95C1B2ABA17F8B44B57EF6E9F4723AE416A46AD(常量)
::00405227:: 8945 F0 MOV [EBP-10],EAX
::0040522A:: 8D45 F0 LEA EAX,[EBP-10]
::0040522D:: 50 PUSH EAX
::0040522E:: B8 A3324000 MOV EAX,4032A3 F653(常量)
::00405233:: 8945 EC MOV [EBP-14],EAX
::00405236:: 8D45 EC LEA EAX,[EBP-14]
::00405239:: 50 PUSH EAX
::0040523A:: E8 38040000 CALL 00405677
::0040523F:: 8B5D EC MOV EBX,[EBP-14]
::00405242:: 85DB TEST EBX,EBX
::00405244:: 74 09 JE SHORT 0040524F
::00405246:: 53 PUSH EBX
::00405247:: E8 FC0D0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::0040524C:: 83C4 04 ADD ESP,4
::0040524F:: 8B5D F0 MOV EBX,[EBP-10]
::00405252:: 85DB TEST EBX,EBX
::00405254:: 74 09 JE SHORT 0040525F
::00405256:: 53 PUSH EBX
::00405257:: E8 EC0D0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::0040525C:: 83C4 04 ADD ESP,4
::0040525F:: 8B5D F8 MOV EBX,[EBP-8]
::00405262:: 85DB TEST EBX,EBX
::00405264:: 74 09 JE SHORT 0040526F
::00405266:: 53 PUSH EBX
::00405267:: E8 DC0D0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::0040526C:: 83C4 04 ADD ESP,4
::0040526F:: E8 40060000 CALL 004058B4
::00405274:: E8 41070000 CALL 004059BA
::00405279:: 68 02000080 PUSH 80000002 逻辑型(基本数据类型)
::0040527E:: 6A 00 PUSH 0
::00405280:: 50 PUSH EAX
::00405281:: 68 01000000 PUSH 1
::00405286:: BB DC090000 MOV EBX,9DC 到整数(系统核心支持库)
::0040528B:: E8 C40D0000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405290:: 83C4 10 ADD ESP,10
::00405293:: 33C9 XOR ECX,ECX
::00405295:: 41 INC ECX
::00405296:: 51 PUSH ECX
::00405297:: 50 PUSH EAX
::00405298:: 3BC8 CMP ECX,EAX
::0040529A:: 0F8F 36000000 JG 004052D6
::004052A0:: 8B1D 94059B00 MOV EBX,[9B0594]
::004052A6:: E8 79EEFFFF CALL 00404124
::004052AB:: B8 57000000 MOV EAX,57
::004052B0:: 3BC1 CMP EAX,ECX
::004052B2:: 7C 0D JL SHORT 004052C1
::004052B4:: 68 01000000 PUSH 1
::004052B9:: E8 9C0D0000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::004052BE:: 83C4 04 ADD ESP,4
::004052C1:: C1E0 02 SHL EAX,2
::004052C4:: 03D8 ADD EBX,EAX
::004052C6:: 895D F8 MOV [EBP-8],EBX
::004052C9:: 8B5D F8 MOV EBX,[EBP-8]
::004052CC:: C703 00000000 MOV DWORD PTR [EBX],0
::004052D2:: 58 POP EAX
::004052D3:: 59 POP ECX
::004052D4:: EB BF JMP SHORT 00405295
::004052D6:: 83C4 08 ADD ESP,8
::004052D9:: 8B1D 94059B00 MOV EBX,[9B0594]
::004052DF:: E8 40EEFFFF CALL 00404124
::004052E4:: B8 57000000 MOV EAX,57
::004052E9:: 3BC1 CMP EAX,ECX
::004052EB:: 7C 0D JL SHORT 004052FA
::004052ED:: 68 01000000 PUSH 1
::004052F2:: E8 630D0000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::004052F7:: 83C4 04 ADD ESP,4
::004052FA:: C1E0 02 SHL EAX,2
::004052FD:: 03D8 ADD EBX,EAX
::004052FF:: 895D F8 MOV [EBP-8],EBX
::00405302:: 8B5D F8 MOV EBX,[EBP-8]
::00405305:: 8B03 MOV EAX,[EBX]
::00405307:: 33C9 XOR ECX,ECX
::00405309:: 41 INC ECX
::0040530A:: 51 PUSH ECX
::0040530B:: 50 PUSH EAX
::0040530C:: 3BC8 CMP ECX,EAX
::0040530E:: 0F8F 42000000 JG 00405356
::00405314:: 68 A1314000 PUSH 4031A1 (常量)
::00405319:: FF35 9C059B00 PUSH DWORD PTR [9B059C]
::0040531F:: E8 C9FBFFFF CALL 00404EED
::00405324:: 83C4 08 ADD ESP,8
::00405327:: 83F8 00 CMP EAX,0
::0040532A:: 0F84 22000000 JE 00405352
::00405330:: 6A 00 PUSH 0
::00405332:: 68 C0334000 PUSH 4033C0 (常量)
::00405337:: 6A FF PUSH -1
::00405339:: 6A 0A PUSH A 图片(“图片框1”的属性)
::0040533B:: 68 6A000116 PUSH 1601006A 图片框1(图片框)
::00405340:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00405345:: E8 280D0000 CALL 00406072 修改窗体对象属性(调用5号服务)
::0040534A:: 83C4 18 ADD ESP,18
::0040534D:: E9 57000000 JMP 004053A9
::00405352:: 58 POP EAX
::00405353:: 59 POP ECX
::00405354:: EB B3 JMP SHORT 00405309
::00405356:: 83C4 08 ADD ESP,8
::00405359:: E8 6D060000 CALL 004059CB
::0040535E:: 68 02000080 PUSH 80000002 逻辑型(基本数据类型)
::00405363:: 6A 00 PUSH 0
::00405365:: 50 PUSH EAX
::00405366:: 68 01000000 PUSH 1
::0040536B:: BB DC090000 MOV EBX,9DC 到整数(系统核心支持库)
::00405370:: E8 DF0C0000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405375:: 83C4 10 ADD ESP,10
::00405378:: 33C9 XOR ECX,ECX
::0040537A:: 41 INC ECX
::0040537B:: 51 PUSH ECX
::0040537C:: 50 PUSH EAX
::0040537D:: 3BC8 CMP ECX,EAX
::0040537F:: 0F8F 21000000 JG 004053A6
::00405385:: 6A 00 PUSH 0
::00405387:: 68 64000000 PUSH 64
::0040538C:: 6A FF PUSH -1
::0040538E:: 6A 08 PUSH 8 时钟周期(“时钟3”的属性)
::00405390:: 68 6B000116 PUSH 1601006B 时钟3(时钟)
::00405395:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::0040539A:: E8 D30C0000 CALL 00406072 修改窗体对象属性(调用5号服务)
::0040539F:: 83C4 18 ADD ESP,18
::004053A2:: 58 POP EAX
::004053A3:: 59 POP ECX
::004053A4:: EB D4 JMP SHORT 0040537A
::004053A6:: 83C4 08 ADD ESP,8
::004053A9:: 8BE5 MOV ESP,EBP
::004053AB:: 5D POP EBP
::004053AC:: C3 RETN
时钟1:::00405A8B:: 55 PUSH EBP
::00405A8C:: 8BEC MOV EBP,ESP
::00405A8E:: 81EC 2C000000 SUB ESP,2C
::00405A94:: 8B1D 94059B00 MOV EBX,[9B0594]
::00405A9A:: E8 85E6FFFF CALL 00404124
::00405A9F:: 53 PUSH EBX
::00405AA0:: 51 PUSH ECX
::00405AA1:: 8B1D 94059B00 MOV EBX,[9B0594]
::00405AA7:: E8 5FE6FFFF CALL 0040410B
::00405AAC:: 48 DEC EAX
::00405AAD:: 79 0D JNS SHORT 00405ABC
::00405AAF:: 68 04000000 PUSH 4
::00405AB4:: E8 A1050000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405AB9:: 83C4 04 ADD ESP,4
::00405ABC:: 59 POP ECX
::00405ABD:: 5B POP EBX
::00405ABE:: 3BC1 CMP EAX,ECX
::00405AC0:: 7C 0D JL SHORT 00405ACF
::00405AC2:: 68 01000000 PUSH 1
::00405AC7:: E8 8E050000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405ACC:: 83C4 04 ADD ESP,4
::00405ACF:: C1E0 02 SHL EAX,2
::00405AD2:: 03D8 ADD EBX,EAX
::00405AD4:: 895D F8 MOV [EBP-8],EBX
::00405AD7:: 8B1D 94059B00 MOV EBX,[9B0594]
::00405ADD:: E8 29E6FFFF CALL 0040410B
::00405AE2:: 8945 F4 MOV [EBP-C],EAX
::00405AE5:: 8B5D F8 MOV EBX,[EBP-8]
::00405AE8:: DB03 FILD DWORD PTR [EBX]
::00405AEA:: DD5D EC FSTP QWORD PTR [EBP-14]
::00405AED:: DD45 EC FLD QWORD PTR [EBP-14]
::00405AF0:: DB45 F4 FILD DWORD PTR [EBP-C]
::00405AF3:: DD5D E4 FSTP QWORD PTR [EBP-1C]
::00405AF6:: DC65 E4 FSUB QWORD PTR [EBP-1C]
::00405AF9:: DD5D DC FSTP QWORD PTR [EBP-24]
::00405AFC:: DD45 DC FLD QWORD PTR [EBP-24]
::00405AFF:: DC05 91314000 FADD QWORD PTR [403191]
::00405B05:: DD5D D4 FSTP QWORD PTR [EBP-2C]
::00405B08:: DD45 D4 FLD QWORD PTR [EBP-2C]
::00405B0B:: E8 9FE7FFFF CALL 004042AF
::00405B10:: 33C9 XOR ECX,ECX
::00405B12:: 41 INC ECX
::00405B13:: 51 PUSH ECX
::00405B14:: 50 PUSH EAX
::00405B15:: 3BC8 CMP ECX,EAX
::00405B17:: 0F8F DC000000 JG 00405BF9
::00405B1D:: 6A 00 PUSH 0
::00405B1F:: 6A 00 PUSH 0
::00405B21:: 6A 00 PUSH 0
::00405B23:: 68 01000000 PUSH 1
::00405B28:: BB 90000000 MOV EBX,90 置随机数种子(系统核心支持库)
::00405B2D:: E8 22050000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405B32:: 83C4 10 ADD ESP,10
::00405B35:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::00405B3A:: 6A 00 PUSH 0
::00405B3C:: 68 32000000 PUSH 32
::00405B41:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::00405B46:: 6A 00 PUSH 0
::00405B48:: 68 01000000 PUSH 1
::00405B4D:: 68 02000000 PUSH 2
::00405B52:: BB 94000000 MOV EBX,94 取随机数(系统核心支持库)
::00405B57:: E8 F8040000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405B5C:: 83C4 1C ADD ESP,1C
::00405B5F:: A3 98059B00 MOV [9B0598],EAX
::00405B64:: 8B1D 94059B00 MOV EBX,[9B0594]
::00405B6A:: E8 B5E5FFFF CALL 00404124
::00405B6F:: 53 PUSH EBX
::00405B70:: 51 PUSH ECX
::00405B71:: A1 98059B00 MOV EAX,[9B0598]
::00405B76:: 48 DEC EAX
::00405B77:: 79 0D JNS SHORT 00405B86
::00405B79:: 68 04000000 PUSH 4
::00405B7E:: E8 D7040000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405B83:: 83C4 04 ADD ESP,4
::00405B86:: 59 POP ECX
::00405B87:: 5B POP EBX
::00405B88:: 3BC1 CMP EAX,ECX
::00405B8A:: 7C 0D JL SHORT 00405B99
::00405B8C:: 68 01000000 PUSH 1
::00405B91:: E8 C4040000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405B96:: 83C4 04 ADD ESP,4
::00405B99:: C1E0 02 SHL EAX,2
::00405B9C:: 03D8 ADD EBX,EAX
::00405B9E:: 895D FC MOV [EBP-4],EBX
::00405BA1:: 8B5D FC MOV EBX,[EBP-4]
::00405BA4:: C703 01000000 MOV DWORD PTR [EBX],1
::00405BAA:: 8B1D 94059B00 MOV EBX,[9B0594]
::00405BB0:: E8 6FE5FFFF CALL 00404124
::00405BB5:: 53 PUSH EBX
::00405BB6:: 51 PUSH ECX
::00405BB7:: 8B1D 94059B00 MOV EBX,[9B0594]
::00405BBD:: E8 49E5FFFF CALL 0040410B
::00405BC2:: 48 DEC EAX
::00405BC3:: 79 0D JNS SHORT 00405BD2
::00405BC5:: 68 04000000 PUSH 4
::00405BCA:: E8 8B040000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405BCF:: 83C4 04 ADD ESP,4
::00405BD2:: 59 POP ECX
::00405BD3:: 5B POP EBX
::00405BD4:: 3BC1 CMP EAX,ECX
::00405BD6:: 7C 0D JL SHORT 00405BE5
::00405BD8:: 68 01000000 PUSH 1
::00405BDD:: E8 78040000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405BE2:: 83C4 04 ADD ESP,4
::00405BE5:: C1E0 02 SHL EAX,2
::00405BE8:: 03D8 ADD EBX,EAX
::00405BEA:: 895D F8 MOV [EBP-8],EBX
::00405BED:: 8B5D F8 MOV EBX,[EBP-8]
::00405BF0:: FF0B DEC DWORD PTR [EBX]
::00405BF2:: 58 POP EAX
::00405BF3:: 59 POP ECX
::00405BF4:: E9 19 JMP 00405B12
::00405BF9:: 83C4 08 ADD ESP,8
::00405BFC:: 8BE5 MOV ESP,EBP
::00405BFE:: 5D POP EBP
::00405BFF:: C3 RETN
时钟2:::00405C1D:: 55 PUSH EBP
::00405C1E:: 8BEC MOV EBP,ESP
::00405C20:: 81EC 18000000 SUB ESP,18
::00405C26:: 833D 98059B00 00 CMP DWORD PTR [9B0598],0
::00405C2D:: 0F85 05000000 JNZ 00405C38
::00405C33:: E9 A0010000 JMP 00405DD8
::00405C38:: 8B1D 94059B00 MOV EBX,[9B0594]
::00405C3E:: E8 E1E4FFFF CALL 00404124
::00405C43:: 53 PUSH EBX
::00405C44:: 51 PUSH ECX
::00405C45:: A1 98059B00 MOV EAX,[9B0598]
::00405C4A:: 48 DEC EAX
::00405C4B:: 79 0D JNS SHORT 00405C5A
::00405C4D:: 68 04000000 PUSH 4
::00405C52:: E8 03040000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405C57:: 83C4 04 ADD ESP,4
::00405C5A:: 59 POP ECX
::00405C5B:: 5B POP EBX
::00405C5C:: 3BC1 CMP EAX,ECX
::00405C5E:: 7C 0D JL SHORT 00405C6D
::00405C60:: 68 01000000 PUSH 1
::00405C65:: E8 F0030000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405C6A:: 83C4 04 ADD ESP,4
::00405C6D:: C1E0 02 SHL EAX,2
::00405C70:: 03D8 ADD EBX,EAX
::00405C72:: 895D FC MOV [EBP-4],EBX
::00405C75:: 8B5D FC MOV EBX,[EBP-4]
::00405C78:: DB03 FILD DWORD PTR [EBX]
::00405C7A:: DD5D F4 FSTP QWORD PTR [EBP-C]
::00405C7D:: DD45 F4 FLD QWORD PTR [EBP-C]
::00405C80:: DC25 91314000 FSUB QWORD PTR [403191]
::00405C86:: DD5D EC FSTP QWORD PTR [EBP-14]
::00405C89:: DD45 EC FLD QWORD PTR [EBP-14]
::00405C8C:: D9E4 FTST
::00405C8E:: DFE0 FSTSW AX
::00405C90:: F6C4 01 TEST AH,1
::00405C93:: 74 02 JE SHORT 00405C97
::00405C95:: D9E0 FCHS
::00405C97:: DC1D 97334000 FCOMP QWORD PTR [403397]
::00405C9D:: DFE0 FSTSW AX
::00405C9F:: F6C4 41 TEST AH,41
::00405CA2:: 0F84 92000000 JE 00405D3A
::00405CA8:: 68 00000000 PUSH 0
::00405CAD:: BB 04010000 MOV EBX,104 取运行目录(系统核心支持库)
::00405CB2:: E8 9D030000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405CB7:: 83C4 04 ADD ESP,4
::00405CBA:: 8945 FC MOV [EBP-4],EAX
::00405CBD:: 68 8E334000 PUSH 40338E \key.dll(常量)
::00405CC2:: FF75 FC PUSH DWORD PTR [EBP-4]
::00405CC5:: B9 02000000 MOV ECX,2
::00405CCA:: E8 72E6FFFF CALL 00404341
::00405CCF:: 83C4 08 ADD ESP,8
::00405CD2:: 8945 F8 MOV [EBP-8],EAX
::00405CD5:: 8B5D FC MOV EBX,[EBP-4]
::00405CD8:: 85DB TEST EBX,EBX
::00405CDA:: 74 09 JE SHORT 00405CE5
::00405CDC:: 53 PUSH EBX
::00405CDD:: E8 66030000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00405CE2:: 83C4 04 ADD ESP,4
::00405CE5:: 6A FF PUSH -1
::00405CE7:: 6A 08 PUSH 8 内容(“编辑框2”的属性)
::00405CE9:: 68 03000116 PUSH 16010003 编辑框2(编辑框)
::00405CEE:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00405CF3:: E8 68030000 CALL 00406060 取窗体对象属性(调用4号服务)
::00405CF8:: 83C4 10 ADD ESP,10
::00405CFB:: 8945 F4 MOV [EBP-C],EAX
::00405CFE:: 8D45 F4 LEA EAX,[EBP-C]
::00405D01:: 50 PUSH EAX
::00405D02:: 8D45 F8 LEA EAX,[EBP-8]
::00405D05:: 50 PUSH EAX
::00405D06:: E8 D1000000 CALL 00405DDC
::00405D0B:: 8B5D F8 MOV EBX,[EBP-8]
::00405D0E:: 85DB TEST EBX,EBX
::00405D10:: 74 09 JE SHORT 00405D1B
::00405D12:: 53 PUSH EBX
::00405D13:: E8 30030000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00405D18:: 83C4 04 ADD ESP,4
::00405D1B:: 8B5D F4 MOV EBX,[EBP-C]
::00405D1E:: 85DB TEST EBX,EBX
::00405D20:: 74 09 JE SHORT 00405D2B
::00405D22:: 53 PUSH EBX
::00405D23:: E8 20030000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00405D28:: 83C4 04 ADD ESP,4
::00405D2B:: C705 98059B00 33000000 MOV DWORD PTR [9B0598],33
::00405D35:: E9 9E000000 JMP 00405DD8
::00405D3A:: 6A 00 PUSH 0
::00405D3C:: 6A 00 PUSH 0
::00405D3E:: 6A 00 PUSH 0
::00405D40:: 68 01000000 PUSH 1
::00405D45:: BB 90000000 MOV EBX,90 置随机数种子(系统核心支持库)
::00405D4A:: E8 05030000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405D4F:: 83C4 10 ADD ESP,10
::00405D52:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::00405D57:: 6A 00 PUSH 0
::00405D59:: 68 33000000 PUSH 33
::00405D5E:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::00405D63:: 6A 00 PUSH 0
::00405D65:: 68 01000000 PUSH 1
::00405D6A:: 68 02000000 PUSH 2
::00405D6F:: BB 94000000 MOV EBX,94 取随机数(系统核心支持库)
::00405D74:: E8 DB020000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00405D79:: 83C4 1C ADD ESP,1C
::00405D7C:: 3905 98059B00 CMP [9B0598],EAX
::00405D82:: 0F8E 50000000 JLE 00405DD8
::00405D88:: 8B1D BC059B00 MOV EBX,[9B05BC]
::00405D8E:: E8 91E3FFFF CALL 00404124
::00405D93:: 53 PUSH EBX
::00405D94:: 51 PUSH ECX
::00405D95:: A1 98059B00 MOV EAX,[9B0598]
::00405D9A:: 48 DEC EAX
::00405D9B:: 79 0D JNS SHORT 00405DAA
::00405D9D:: 68 04000000 PUSH 4
::00405DA2:: E8 B3020000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405DA7:: 83C4 04 ADD ESP,4
::00405DAA:: 59 POP ECX
::00405DAB:: 5B POP EBX
::00405DAC:: 3BC1 CMP EAX,ECX
::00405DAE:: 7C 0D JL SHORT 00405DBD
::00405DB0:: 68 01000000 PUSH 1
::00405DB5:: E8 A0020000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00405DBA:: 83C4 04 ADD ESP,4
::00405DBD:: C1E0 02 SHL EAX,2
::00405DC0:: 03D8 ADD EBX,EAX
::00405DC2:: 895D FC MOV [EBP-4],EBX
::00405DC5:: 8B5D FC MOV EBX,[EBP-4]
::00405DC8:: C703 01000000 MOV DWORD PTR [EBX],1
::00405DCE:: C705 98059B00 58000000 MOV DWORD PTR [9B0598],58
::00405DD8:: 8BE5 MOV ESP,EBP
::00405DDA:: 5D POP EBP
::00405DDB:: C3 RETN
时钟3:::00404144:: 55 PUSH EBP
::00404145:: 8BEC MOV EBP,ESP
::00404147:: 81EC 08000000 SUB ESP,8
::0040414D:: C745 FC 00000000 MOV DWORD PTR [EBP-4],0
::00404154:: 6A FF PUSH -1
::00404156:: 6A 08 PUSH 8 时钟周期(“时钟3”的属性)
::00404158:: 68 6B000116 PUSH 1601006B 时钟3(时钟)
::0040415D:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404162:: E8 F91E0000 CALL 00406060 取窗体对象属性(调用4号服务)
::00404167:: 83C4 10 ADD ESP,10
::0040416A:: 6A 00 PUSH 0
::0040416C:: 50 PUSH EAX
::0040416D:: 6A FF PUSH -1
::0040416F:: 6A 08 PUSH 8 时钟周期(“时钟4”的属性)
::00404171:: 68 71000116 PUSH 16010071 时钟4(时钟)
::00404176:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::0040417B:: E8 F21E0000 CALL 00406072 修改窗体对象属性(调用5号服务)
::00404180:: 83C4 18 ADD ESP,18
::00404183:: 6A 00 PUSH 0
::00404185:: 68 00000000 PUSH 0
::0040418A:: 6A FF PUSH -1
::0040418C:: 6A 08 PUSH 8 时钟周期(“时钟3”的属性)
::0040418E:: 68 6B000116 PUSH 1601006B 时钟3(时钟)
::00404193:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404198:: E8 D51E0000 CALL 00406072 修改窗体对象属性(调用5号服务)
::0040419D:: 83C4 18 ADD ESP,18
::004041A0:: 8B1D 90059B00 MOV EBX,[9B0590]
::004041A6:: E8 60 CALL 0040410B
::004041AB:: 33C9 XOR ECX,ECX
::004041AD:: 50 PUSH EAX
::004041AE:: 8D45 FC LEA EAX,[EBP-4]
::004041B1:: 8BD8 MOV EBX,EAX
::004041B3:: 58 POP EAX
::004041B4:: 41 INC ECX
::004041B5:: 51 PUSH ECX
::004041B6:: 53 PUSH EBX
::004041B7:: 890B MOV [EBX],ECX
::004041B9:: 50 PUSH EAX
::004041BA:: 3BC8 CMP ECX,EAX
::004041BC:: 0F8F 48000000 JG 0040420A
::004041C2:: 8B1D 90059B00 MOV EBX,[9B0590]
::004041C8:: E8 57 CALL 00404124
::004041CD:: 53 PUSH EBX
::004041CE:: 51 PUSH ECX
::004041CF:: 8B45 FC MOV EAX,[EBP-4]
::004041D2:: 48 DEC EAX
::004041D3:: 79 0D JNS SHORT 004041E2
::004041D5:: 68 04000000 PUSH 4
::004041DA:: E8 7B1E0000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::004041DF:: 83C4 04 ADD ESP,4
::004041E2:: 59 POP ECX
::004041E3:: 5B POP EBX
::004041E4:: 3BC1 CMP EAX,ECX
::004041E6:: 7C 0D JL SHORT 004041F5
::004041E8:: 68 01000000 PUSH 1
::004041ED:: E8 681E0000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::004041F2:: 83C4 04 ADD ESP,4
::004041F5:: C1E0 02 SHL EAX,2
::004041F8:: 03D8 ADD EBX,EAX
::004041FA:: 895D F8 MOV [EBP-8],EBX
::004041FD:: 8B45 FC MOV EAX,[EBP-4]
::00404200:: 8B5D F8 MOV EBX,[EBP-8]
::00404203:: 8903 MOV [EBX],EAX
::00404205:: 58 POP EAX
::00404206:: 5B POP EBX
::00404207:: 59 POP ECX
::00404208:: EB AA JMP SHORT 004041B4
::0040420A:: 83C4 0C ADD ESP,C
::0040420D:: 8BE5 MOV ESP,EBP
::0040420F:: 5D POP EBP
::00404210:: C3 RETN
时钟4:::004043FC:: 55 PUSH EBP
::004043FD:: 8BEC MOV EBP,ESP
::004043FF:: 81EC 48000000 SUB ESP,48
::00404405:: C745 FC 00000000 MOV DWORD PTR [EBP-4],0
::0040440C:: C745 F8 00000000 MOV DWORD PTR [EBP-8],0
::00404413:: C745 F4 00000000 MOV DWORD PTR [EBP-C],0
::0040441A:: C745 F0 00000000 MOV DWORD PTR [EBP-10],0
::00404421:: C745 EC 00000000 MOV DWORD PTR [EBP-14],0
::00404428:: C745 E8 00000000 MOV DWORD PTR [EBP-18],0
::0040442F:: C745 E4 00000000 MOV DWORD PTR [EBP-1C],0
::00404436:: 833D 98059B00 58 CMP DWORD PTR [9B0598],58
::0040443D:: 0F85 05000000 JNZ 00404448
::00404443:: E9 DC000000 JMP 00404524
::00404448:: 8B1D 90059B00 MOV EBX,[9B0590]
::0040444E:: E8 D1FCFFFF CALL 00404124
::00404453:: 53 PUSH EBX
::00404454:: 51 PUSH ECX
::00404455:: 8B1D 90059B00 MOV EBX,[9B0590]
::0040445B:: E8 ABFCFFFF CALL 0040410B
::00404460:: 48 DEC EAX
::00404461:: 79 0D JNS SHORT 00404470
::00404463:: 68 04000000 PUSH 4
::00404468:: E8 ED1B0000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::0040446D:: 83C4 04 ADD ESP,4
::00404470:: 59 POP ECX
::00404471:: 5B POP EBX
::00404472:: 3BC1 CMP EAX,ECX
::00404474:: 7C 0D JL SHORT 00404483
::00404476:: 68 01000000 PUSH 1
::0040447B:: E8 DA1B0000 CALL 0040605A 调用Runtime内部异常处理(调用0号服务)
::00404480:: 83C4 04 ADD ESP,4
::00404483:: C1E0 02 SHL EAX,2
::00404486:: 03D8 ADD EBX,EAX
::00404488:: 895D DC MOV [EBP-24],EBX
::0040448B:: 8B1D 90059B00 MOV EBX,[9B0590]
::00404491:: E8 75FCFFFF CALL 0040410B
::00404496:: 8945 D8 MOV [EBP-28],EAX
::00404499:: 8B5D DC MOV EBX,[EBP-24]
::0040449C:: DB03 FILD DWORD PTR [EBX]
::0040449E:: DD5D D0 FSTP QWORD PTR [EBP-30]
::004044A1:: DD45 D0 FLD QWORD PTR [EBP-30]
::004044A4:: DB45 D8 FILD DWORD PTR [EBP-28]
::004044A7:: DD5D C8 FSTP QWORD PTR [EBP-38]
::004044AA:: DC65 C8 FSUB QWORD PTR [EBP-38]
::004044AD:: DD5D C0 FSTP QWORD PTR [EBP-40]
::004044B0:: DD45 C0 FLD QWORD PTR [EBP-40]
::004044B3:: DC05 91314000 FADD QWORD PTR [403191]
::004044B9:: DD5D B8 FSTP QWORD PTR [EBP-48]
::004044BC:: DD45 B8 FLD QWORD PTR [EBP-48]
::004044BF:: E8 EBFDFFFF CALL 004042AF
::004044C4:: 33C9 XOR ECX,ECX
::004044C6:: 41 INC ECX
::004044C7:: 51 PUSH ECX
::004044C8:: 50 PUSH EAX
::004044C9:: 3BC8 CMP ECX,EAX
::004044CB:: 0F8F 4B000000 JG 0040451C
::004044D1:: 6A 00 PUSH 0
::004044D3:: 6A 00 PUSH 0
::004044D5:: 6A 00 PUSH 0
::004044D7:: 68 01000000 PUSH 1
::004044DC:: BB 90000000 MOV EBX,90 置随机数种子(系统核心支持库)
::004044E1:: E8 6E1B0000 CALL 00406054 调用核心支持库命令(调用3号服务)
::004044E6:: 83C4 10 ADD ESP,10
::004044E9:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::004044EE:: 6A 00 PUSH 0
::004044F0:: 68 63000000 PUSH 63
::004044F5:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::004044FA:: 6A 00 PUSH 0
::004044FC:: 68 34000000 PUSH 34
::00404501:: 68 02000000 PUSH 2
::00404506:: BB 94000000 MOV EBX,94 取随机数(系统核心支持库)
::0040450B:: E8 441B0000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404510:: 83C4 1C ADD ESP,1C
::00404513:: A3 98059B00 MOV [9B0598],EAX
::00404518:: 58 POP EAX
::00404519:: 59 POP ECX
::0040451A:: EB AA JMP SHORT 004044C6
::0040451C:: 83C4 08 ADD ESP,8
::0040451F:: E9 4C070000 JMP 00404C70
::00404524:: DB05 98059B00 FILD DWORD PTR [9B0598]
::0040452A:: DD5D DC FSTP QWORD PTR [EBP-24]
::0040452D:: DD45 DC FLD QWORD PTR [EBP-24]
::00404530:: DC25 99314000 FSUB QWORD PTR [403199]
::00404536:: DD5D D4 FSTP QWORD PTR [EBP-2C]
::00404539:: DD45 D4 FLD QWORD PTR [EBP-2C]
::0040453C:: E8 6EFDFFFF CALL 004042AF
::00404541:: 8945 FC MOV [EBP-4],EAX
::00404544:: C745 F8 FF MOV DWORD PTR [EBP-8],-1
::0040454B:: DB05 98059B00 FILD DWORD PTR [9B0598]
::00404551:: DD5D DC FSTP QWORD PTR [EBP-24]
::00404554:: DD45 DC FLD QWORD PTR [EBP-24]
::00404557:: DC25 99314000 FSUB QWORD PTR [403199]
::0040455D:: DD5D D4 FSTP QWORD PTR [EBP-2C]
::00404560:: DD45 D4 FLD QWORD PTR [EBP-2C]
::00404563:: E8 47FDFFFF CALL 004042AF
::00404568:: 33C9 XOR ECX,ECX
::0040456A:: 41 INC ECX
::0040456B:: 51 PUSH ECX
::0040456C:: 50 PUSH EAX
::0040456D:: 3BC8 CMP ECX,EAX
::0040456F:: 0F8F 07000000 JG 0040457C
::00404575:: FF45 F8 INC DWORD PTR [EBP-8]
::00404578:: 58 POP EAX
::00404579:: 59 POP ECX
::0040457A:: EB EE JMP SHORT 0040456A
::0040457C:: 83C4 08 ADD ESP,8
::0040457F:: DB45 FC FILD DWORD PTR [EBP-4]
::00404582:: DD5D DC FSTP QWORD PTR [EBP-24]
::00404585:: DD45 DC FLD QWORD PTR [EBP-24]
::00404588:: DB45 F8 FILD DWORD PTR [EBP-8]
::0040458B:: DD5D D4 FSTP QWORD PTR [EBP-2C]
::0040458E:: DC65 D4 FSUB QWORD PTR [EBP-2C]
::00404591:: DD5D CC FSTP QWORD PTR [EBP-34]
::00404594:: DD45 CC FLD QWORD PTR [EBP-34]
::00404597:: E8 13FDFFFF CALL 004042AF
::0040459C:: 33C9 XOR ECX,ECX
::0040459E:: 41 INC ECX
::0040459F:: 51 PUSH ECX
::004045A0:: 50 PUSH EAX
::004045A1:: 3BC8 CMP ECX,EAX
::004045A3:: 0F8F A7060000 JG 00404C50
::004045A9:: E8 16070000 CALL 00404CC4
::004045AE:: 8945 E0 MOV [EBP-20],EAX
::004045B1:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004045B6:: 6A 00 PUSH 0
::004045B8:: 8B45 E0 MOV EAX,[EBP-20]
::004045BB:: 85C0 TEST EAX,EAX
::004045BD:: 75 05 JNZ SHORT 004045C4
::004045BF:: B8 A1314000 MOV EAX,4031A1 (常量)
::004045C4:: 50 PUSH EAX
::004045C5:: 68 01000000 PUSH 1
::004045CA:: BB 98010000 MOV EBX,198 到字节集(系统核心支持库)
::004045CF:: E8 801A0000 CALL 00406054 调用核心支持库命令(调用3号服务)
::004045D4:: 83C4 10 ADD ESP,10
::004045D7:: 8945 DC MOV [EBP-24],EAX
::004045DA:: 8B5D E0 MOV EBX,[EBP-20]
::004045DD:: 85DB TEST EBX,EBX
::004045DF:: 74 09 JE SHORT 004045EA
::004045E1:: 53 PUSH EBX
::004045E2:: E8 611A0000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::004045E7:: 83C4 04 ADD ESP,4
::004045EA:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004045EF:: 6A 00 PUSH 0
::004045F1:: 68 A2314000 PUSH 4031A2 C5167F58C9FDD9B22187F665843ED3594667AD7BBCC14AA4BC24B20CAD98CFEA44ECEF91B289F99B093F980FCB3B56645696472ED38374E95C1B2ABA17F8B44B57EF6E9F4723AE416A46AD(常量)
::004045F6:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004045FB:: 6A 00 PUSH 0
::004045FD:: 68 A3324000 PUSH 4032A3 F653(常量)
::00404602:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::00404607:: 6A 00 PUSH 0
::00404609:: A1 9C059B00 MOV EAX,[9B059C]
::0040460E:: 85C0 TEST EAX,EAX
::00404610:: 75 05 JNZ SHORT 00404617
::00404612:: B8 A1314000 MOV EAX,4031A1 (常量)
::00404617:: 50 PUSH EAX
::00404618:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::0040461D:: 6A 00 PUSH 0
::0040461F:: 8B45 DC MOV EAX,[EBP-24]
::00404622:: 85C0 TEST EAX,EAX
::00404624:: 75 05 JNZ SHORT 0040462B
::00404626:: B8 A8324000 MOV EAX,4032A8 (常量)
::0040462B:: 50 PUSH EAX
::0040462C:: 68 04000000 PUSH 4
::00404631:: BB 18000000 MOV EBX,18 签名验证(数据操作支持库一)
::00404636:: B8 01000000 MOV EAX,1
::0040463B:: E8 261A0000 CALL 00406066 调用其他支持库命令(调用2号服务)
::00404640:: 83C4 34 ADD ESP,34
::00404643:: 8945 D8 MOV [EBP-28],EAX
::00404646:: 8B5D DC MOV EBX,[EBP-24]
::00404649:: 85DB TEST EBX,EBX
::0040464B:: 74 09 JE SHORT 00404656
::0040464D:: 53 PUSH EBX
::0040464E:: E8 F5190000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404653:: 83C4 04 ADD ESP,4
::00404656:: 68 02000080 PUSH 80000002 逻辑型(基本数据类型)
::0040465B:: 6A 00 PUSH 0
::0040465D:: FF75 D8 PUSH DWORD PTR [EBP-28]
::00404660:: 68 01000000 PUSH 1
::00404665:: BB DC090000 MOV EBX,9DC 到整数(系统核心支持库)
::0040466A:: E8 E5190000 CALL 00406054 调用核心支持库命令(调用3号服务)
::0040466F:: 83C4 10 ADD ESP,10
::00404672:: 33C9 XOR ECX,ECX
::00404674:: 41 INC ECX
::00404675:: 51 PUSH ECX
::00404676:: 50 PUSH EAX
::00404677:: 3BC8 CMP ECX,EAX
::00404679:: 0F8F C7050000 JG 00404C46
::0040467F:: E8 40060000 CALL 00404CC4
::00404684:: 8945 E0 MOV [EBP-20],EAX
::00404687:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::0040468C:: 6A 00 PUSH 0
::0040468E:: 8B45 E0 MOV EAX,[EBP-20]
::00404691:: 85C0 TEST EAX,EAX
::00404693:: 75 05 JNZ SHORT 0040469A
::00404695:: B8 A1314000 MOV EAX,4031A1 (常量)
::0040469A:: 50 PUSH EAX
::0040469B:: 68 01000000 PUSH 1
::004046A0:: BB 98010000 MOV EBX,198 到字节集(系统核心支持库)
::004046A5:: E8 AA190000 CALL 00406054 调用核心支持库命令(调用3号服务)
::004046AA:: 83C4 10 ADD ESP,10
::004046AD:: 8945 DC MOV [EBP-24],EAX
::004046B0:: 8B5D E0 MOV EBX,[EBP-20]
::004046B3:: 85DB TEST EBX,EBX
::004046B5:: 74 09 JE SHORT 004046C0
::004046B7:: 53 PUSH EBX
::004046B8:: E8 8B190000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::004046BD:: 83C4 04 ADD ESP,4
::004046C0:: 68 B0324000 PUSH 4032B0 0(常量)
::004046C5:: FF35 9C059B00 PUSH DWORD PTR [9B059C]
::004046CB:: B9 02000000 MOV ECX,2
::004046D0:: E8 6CFCFFFF CALL 00404341
::004046D5:: 83C4 08 ADD ESP,8
::004046D8:: 8945 D8 MOV [EBP-28],EAX
::004046DB:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004046E0:: 6A 00 PUSH 0
::004046E2:: 68 A2314000 PUSH 4031A2 C5167F58C9FDD9B22187F665843ED3594667AD7BBCC14AA4BC24B20CAD98CFEA44ECEF91B289F99B093F980FCB3B56645696472ED38374E95C1B2ABA17F8B44B57EF6E9F4723AE416A46AD(常量)
::004046E7:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004046EC:: 6A 00 PUSH 0
::004046EE:: 68 A3324000 PUSH 4032A3 F653(常量)
::004046F3:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004046F8:: 6A 00 PUSH 0
::004046FA:: 8B45 D8 MOV EAX,[EBP-28]
::004046FD:: 85C0 TEST EAX,EAX
::004046FF:: 75 05 JNZ SHORT 00404706
::00404701:: B8 A1314000 MOV EAX,4031A1 (常量)
::00404706:: 50 PUSH EAX
::00404707:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::0040470C:: 6A 00 PUSH 0
::0040470E:: 8B45 DC MOV EAX,[EBP-24]
::00404711:: 85C0 TEST EAX,EAX
::00404713:: 75 05 JNZ SHORT 0040471A
::00404715:: B8 A8324000 MOV EAX,4032A8 (常量)
::0040471A:: 50 PUSH EAX
::0040471B:: 68 04000000 PUSH 4
::00404720:: BB 18000000 MOV EBX,18 签名验证(数据操作支持库一)
::00404725:: B8 01000000 MOV EAX,1
::0040472A:: E8 37190000 CALL 00406066 调用其他支持库命令(调用2号服务)
::0040472F:: 83C4 34 ADD ESP,34
::00404732:: 8945 D4 MOV [EBP-2C],EAX
::00404735:: 8B5D DC MOV EBX,[EBP-24]
::00404738:: 85DB TEST EBX,EBX
::0040473A:: 74 09 JE SHORT 00404745
::0040473C:: 53 PUSH EBX
::0040473D:: E8 06190000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404742:: 83C4 04 ADD ESP,4
::00404745:: 8B5D D8 MOV EBX,[EBP-28]
::00404748:: 85DB TEST EBX,EBX
::0040474A:: 74 09 JE SHORT 00404755
::0040474C:: 53 PUSH EBX
::0040474D:: E8 F6180000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404752:: 83C4 04 ADD ESP,4
::00404755:: 68 02000080 PUSH 80000002 逻辑型(基本数据类型)
::0040475A:: 6A 00 PUSH 0
::0040475C:: FF75 D4 PUSH DWORD PTR [EBP-2C]
::0040475F:: 68 01000000 PUSH 1
::00404764:: BB DC090000 MOV EBX,9DC 到整数(系统核心支持库)
::00404769:: E8 E6180000 CALL 00406054 调用核心支持库命令(调用3号服务)
::0040476E:: 83C4 10 ADD ESP,10
::00404771:: 33C9 XOR ECX,ECX
::00404773:: 41 INC ECX
::00404774:: 51 PUSH ECX
::00404775:: 50 PUSH EAX
::00404776:: 3BC8 CMP ECX,EAX
::00404778:: 0F8F 26000000 JG 004047A4
::0040477E:: 6A 00 PUSH 0
::00404780:: 68 00000000 PUSH 0
::00404785:: 6A FF PUSH -1
::00404787:: 6A 08 PUSH 8 时钟周期(“时钟4”的属性)
::00404789:: 68 71000116 PUSH 16010071 时钟4(时钟)
::0040478E:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404793:: E8 DA180000 CALL 00406072 修改窗体对象属性(调用5号服务)
::00404798:: 83C4 18 ADD ESP,18
::0040479B:: E9 D0040000 JMP 00404C70
::004047A0:: 58 POP EAX
::004047A1:: 59 POP ECX
::004047A2:: EB CF JMP SHORT 00404773
::004047A4:: 83C4 08 ADD ESP,8
::004047A7:: B8 B2324000 MOV EAX,4032B2 (常量)
::004047AC:: 85C0 TEST EAX,EAX
::004047AE:: 74 13 JE SHORT 004047C3
::004047B0:: 50 PUSH EAX
::004047B1:: 8B40 04 MOV EAX,[EAX+4]
::004047B4:: 83C0 08 ADD EAX,8
::004047B7:: 50 PUSH EAX
::004047B8:: E8 91180000 CALL 0040604E 从堆上分配内存空间(调用6号服务)
::004047BD:: 59 POP ECX
::004047BE:: 5E POP ESI
::004047BF:: 8BF8 MOV EDI,EAX
::004047C1:: F3:A4 REP MOVS BYTE PTR ES:[EDI],BYTE PTR [ESI]
::004047C3:: 50 PUSH EAX
::004047C4:: 8B5D F4 MOV EBX,[EBP-C]
::004047C7:: 85DB TEST EBX,EBX
::004047C9:: 74 09 JE SHORT 004047D4
::004047CB:: 53 PUSH EBX
::004047CC:: E8 77180000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::004047D1:: 83C4 04 ADD ESP,4
::004047D4:: 58 POP EAX
::004047D5:: 8945 F4 MOV [EBP-C],EAX
::004047D8:: E8 E7040000 CALL 00404CC4
::004047DD:: 8945 E0 MOV [EBP-20],EAX
::004047E0:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004047E5:: 6A 00 PUSH 0
::004047E7:: 8B45 E0 MOV EAX,[EBP-20]
::004047EA:: 85C0 TEST EAX,EAX
::004047EC:: 75 05 JNZ SHORT 004047F3
::004047EE:: B8 A1314000 MOV EAX,4031A1 (常量)
::004047F3:: 50 PUSH EAX
::004047F4:: 68 01000000 PUSH 1
::004047F9:: BB 98010000 MOV EBX,198 到字节集(系统核心支持库)
::004047FE:: E8 51180000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404803:: 83C4 10 ADD ESP,10
::00404806:: 8945 DC MOV [EBP-24],EAX
::00404809:: 8B5D E0 MOV EBX,[EBP-20]
::0040480C:: 85DB TEST EBX,EBX
::0040480E:: 74 09 JE SHORT 00404819
::00404810:: 53 PUSH EBX
::00404811:: E8 32180000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404816:: 83C4 04 ADD ESP,4
::00404819:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::0040481E:: 6A 00 PUSH 0
::00404820:: 68 A2314000 PUSH 4031A2 C5167F58C9FDD9B22187F665843ED3594667AD7BBCC14AA4BC24B20CAD98CFEA44ECEF91B289F99B093F980FCB3B56645696472ED38374E95C1B2ABA17F8B44B57EF6E9F4723AE416A46AD(常量)
::00404825:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::0040482A:: 6A 00 PUSH 0
::0040482C:: 68 A3324000 PUSH 4032A3 F653(常量)
::00404831:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::00404836:: 6A 00 PUSH 0
::00404838:: A1 9C059B00 MOV EAX,[9B059C]
::0040483D:: 85C0 TEST EAX,EAX
::0040483F:: 75 05 JNZ SHORT 00404846
::00404841:: B8 A1314000 MOV EAX,4031A1 (常量)
::00404846:: 50 PUSH EAX
::00404847:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::0040484C:: 6A 00 PUSH 0
::0040484E:: 8B45 DC MOV EAX,[EBP-24]
::00404851:: 85C0 TEST EAX,EAX
::00404853:: 75 05 JNZ SHORT 0040485A
::00404855:: B8 A8324000 MOV EAX,4032A8 (常量)
::0040485A:: 50 PUSH EAX
::0040485B:: 68 04000000 PUSH 4
::00404860:: BB 18000000 MOV EBX,18 签名验证(数据操作支持库一)
::00404865:: B8 01000000 MOV EAX,1
::0040486A:: E8 F7170000 CALL 00406066 调用其他支持库命令(调用2号服务)
::0040486F:: 83C4 34 ADD ESP,34
::00404872:: 8945 D8 MOV [EBP-28],EAX
::00404875:: 8B5D DC MOV EBX,[EBP-24]
::00404878:: 85DB TEST EBX,EBX
::0040487A:: 74 09 JE SHORT 00404885
::0040487C:: 53 PUSH EBX
::0040487D:: E8 C6170000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404882:: 83C4 04 ADD ESP,4
::00404885:: 68 02000080 PUSH 80000002 逻辑型(基本数据类型)
::0040488A:: 6A 00 PUSH 0
::0040488C:: FF75 D8 PUSH DWORD PTR [EBP-28]
::0040488F:: 68 01000000 PUSH 1
::00404894:: BB DC090000 MOV EBX,9DC 到整数(系统核心支持库)
::00404899:: E8 B6170000 CALL 00406054 调用核心支持库命令(调用3号服务)
::0040489E:: 83C4 10 ADD ESP,10
::004048A1:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::004048A6:: 6A 00 PUSH 0
::004048A8:: 50 PUSH EAX
::004048A9:: 68 01000000 PUSH 1
::004048AE:: BB 68010000 MOV EBX,168 到文本(系统核心支持库)
::004048B3:: E8 9C170000 CALL 00406054 调用核心支持库命令(调用3号服务)
::004048B8:: 83C4 10 ADD ESP,10
::004048BB:: 8945 D0 MOV [EBP-30],EAX
::004048BE:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004048C3:: 6A 00 PUSH 0
::004048C5:: 8B45 D0 MOV EAX,[EBP-30]
::004048C8:: 85C0 TEST EAX,EAX
::004048CA:: 75 05 JNZ SHORT 004048D1
::004048CC:: B8 A1314000 MOV EAX,4031A1 (常量)
::004048D1:: 50 PUSH EAX
::004048D2:: 68 01000000 PUSH 1
::004048D7:: BB 98010000 MOV EBX,198 到字节集(系统核心支持库)
::004048DC:: E8 73170000 CALL 00406054 调用核心支持库命令(调用3号服务)
::004048E1:: 83C4 10 ADD ESP,10
::004048E4:: 8945 CC MOV [EBP-34],EAX
::004048E7:: 8B5D D0 MOV EBX,[EBP-30]
::004048EA:: 85DB TEST EBX,EBX
::004048EC:: 74 09 JE SHORT 004048F7
::004048EE:: 53 PUSH EBX
::004048EF:: E8 54170000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::004048F4:: 83C4 04 ADD ESP,4
::004048F7:: 8B45 CC MOV EAX,[EBP-34]
::004048FA:: 50 PUSH EAX
::004048FB:: 8B5D F0 MOV EBX,[EBP-10]
::004048FE:: 85DB TEST EBX,EBX
::00404900:: 74 09 JE SHORT 0040490B
::00404902:: 53 PUSH EBX
::00404903:: E8 40170000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404908:: 83C4 04 ADD ESP,4
::0040490B:: 58 POP EAX
::0040490C:: 8945 F0 MOV [EBP-10],EAX
::0040490F:: B8 C8324000 MOV EAX,4032C8 (常量)
::00404914:: 85C0 TEST EAX,EAX
::00404916:: 74 13 JE SHORT 0040492B
::00404918:: 50 PUSH EAX
::00404919:: 8B40 04 MOV EAX,[EAX+4]
::0040491C:: 83C0 08 ADD EAX,8
::0040491F:: 50 PUSH EAX
::00404920:: E8 29170000 CALL 0040604E 从堆上分配内存空间(调用6号服务)
::00404925:: 59 POP ECX
::00404926:: 5E POP ESI
::00404927:: 8BF8 MOV EDI,EAX
::00404929:: F3:A4 REP MOVS BYTE PTR ES:[EDI],BYTE PTR [ESI]
::0040492B:: 50 PUSH EAX
::0040492C:: 8B5D EC MOV EBX,[EBP-14]
::0040492F:: 85DB TEST EBX,EBX
::00404931:: 74 09 JE SHORT 0040493C
::00404933:: 53 PUSH EBX
::00404934:: E8 0F170000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404939:: 83C4 04 ADD ESP,4
::0040493C:: 58 POP EAX
::0040493D:: 8945 EC MOV [EBP-14],EAX
::00404940:: E8 7F030000 CALL 00404CC4
::00404945:: 8945 E0 MOV [EBP-20],EAX
::00404948:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::0040494D:: 6A 00 PUSH 0
::0040494F:: 8B45 E0 MOV EAX,[EBP-20]
::00404952:: 85C0 TEST EAX,EAX
::00404954:: 75 05 JNZ SHORT 0040495B
::00404956:: B8 A1314000 MOV EAX,4031A1 (常量)
::0040495B:: 50 PUSH EAX
::0040495C:: 68 01000000 PUSH 1
::00404961:: BB 98010000 MOV EBX,198 到字节集(系统核心支持库)
::00404966:: E8 E9160000 CALL 00406054 调用核心支持库命令(调用3号服务)
::0040496B:: 83C4 10 ADD ESP,10
::0040496E:: 8945 DC MOV [EBP-24],EAX
::00404971:: 8B5D E0 MOV EBX,[EBP-20]
::00404974:: 85DB TEST EBX,EBX
::00404976:: 74 09 JE SHORT 00404981
::00404978:: 53 PUSH EBX
::00404979:: E8 CA160000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::0040497E:: 83C4 04 ADD ESP,4
::00404981:: 68 D7324000 PUSH 4032D7 1(常量)
::00404986:: FF35 9C059B00 PUSH DWORD PTR [9B059C]
::0040498C:: B9 02000000 MOV ECX,2
::00404991:: E8 ABF9FFFF CALL 00404341
::00404996:: 83C4 08 ADD ESP,8
::00404999:: 8945 D8 MOV [EBP-28],EAX
::0040499C:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004049A1:: 6A 00 PUSH 0
::004049A3:: 68 A2314000 PUSH 4031A2 C5167F58C9FDD9B22187F665843ED3594667AD7BBCC14AA4BC24B20CAD98CFEA44ECEF91B289F99B093F980FCB3B56645696472ED38374E95C1B2ABA17F8B44B57EF6E9F4723AE416A46AD(常量)
::004049A8:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004049AD:: 6A 00 PUSH 0
::004049AF:: 68 A3324000 PUSH 4032A3 F653(常量)
::004049B4:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::004049B9:: 6A 00 PUSH 0
::004049BB:: 8B45 D8 MOV EAX,[EBP-28]
::004049BE:: 85C0 TEST EAX,EAX
::004049C0:: 75 05 JNZ SHORT 004049C7
::004049C2:: B8 A1314000 MOV EAX,4031A1 (常量)
::004049C7:: 50 PUSH EAX
::004049C8:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::004049CD:: 6A 00 PUSH 0
::004049CF:: 8B45 DC MOV EAX,[EBP-24]
::004049D2:: 85C0 TEST EAX,EAX
::004049D4:: 75 05 JNZ SHORT 004049DB
::004049D6:: B8 A8324000 MOV EAX,4032A8 (常量)
::004049DB:: 50 PUSH EAX
::004049DC:: 68 04000000 PUSH 4
::004049E1:: BB 18000000 MOV EBX,18 签名验证(数据操作支持库一)
::004049E6:: B8 01000000 MOV EAX,1
::004049EB:: E8 76160000 CALL 00406066 调用其他支持库命令(调用2号服务)
::004049F0:: 83C4 34 ADD ESP,34
::004049F3:: 8945 D4 MOV [EBP-2C],EAX
::004049F6:: 8B5D DC MOV EBX,[EBP-24]
::004049F9:: 85DB TEST EBX,EBX
::004049FB:: 74 09 JE SHORT 00404A06
::004049FD:: 53 PUSH EBX
::004049FE:: E8 45160000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404A03:: 83C4 04 ADD ESP,4
::00404A06:: 8B5D D8 MOV EBX,[EBP-28]
::00404A09:: 85DB TEST EBX,EBX
::00404A0B:: 74 09 JE SHORT 00404A16
::00404A0D:: 53 PUSH EBX
::00404A0E:: E8 35160000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404A13:: 83C4 04 ADD ESP,4
::00404A16:: 68 02000080 PUSH 80000002 逻辑型(基本数据类型)
::00404A1B:: 6A 00 PUSH 0
::00404A1D:: FF75 D4 PUSH DWORD PTR [EBP-2C]
::00404A20:: 68 01000000 PUSH 1
::00404A25:: BB DC090000 MOV EBX,9DC 到整数(系统核心支持库)
::00404A2A:: E8 25160000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404A2F:: 83C4 10 ADD ESP,10
::00404A32:: 68 01030080 PUSH 80000301 整数型(基本数据类型)
::00404A37:: 6A 00 PUSH 0
::00404A39:: 50 PUSH EAX
::00404A3A:: 68 01000000 PUSH 1
::00404A3F:: BB 68010000 MOV EBX,168 到文本(系统核心支持库)
::00404A44:: E8 0B160000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404A49:: 83C4 10 ADD ESP,10
::00404A4C:: 8945 CC MOV [EBP-34],EAX
::00404A4F:: 68 04000080 PUSH 80000004 文本型(基本数据类型)
::00404A54:: 6A 00 PUSH 0
::00404A56:: 8B45 CC MOV EAX,[EBP-34]
::00404A59:: 85C0 TEST EAX,EAX
::00404A5B:: 75 05 JNZ SHORT 00404A62
::00404A5D:: B8 A1314000 MOV EAX,4031A1 (常量)
::00404A62:: 50 PUSH EAX
::00404A63:: 68 01000000 PUSH 1
::00404A68:: BB 98010000 MOV EBX,198 到字节集(系统核心支持库)
::00404A6D:: E8 E2150000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404A72:: 83C4 10 ADD ESP,10
::00404A75:: 8945 C8 MOV [EBP-38],EAX
::00404A78:: 8B5D CC MOV EBX,[EBP-34]
::00404A7B:: 85DB TEST EBX,EBX
::00404A7D:: 74 09 JE SHORT 00404A88
::00404A7F:: 53 PUSH EBX
::00404A80:: E8 C3150000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404A85:: 83C4 04 ADD ESP,4
::00404A88:: 8B45 C8 MOV EAX,[EBP-38]
::00404A8B:: 50 PUSH EAX
::00404A8C:: 8B5D E8 MOV EBX,[EBP-18]
::00404A8F:: 85DB TEST EBX,EBX
::00404A91:: 74 09 JE SHORT 00404A9C
::00404A93:: 53 PUSH EBX
::00404A94:: E8 AF150000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404A99:: 83C4 04 ADD ESP,4
::00404A9C:: 58 POP EAX
::00404A9D:: 8945 E8 MOV [EBP-18],EAX
::00404AA0:: 33C9 XOR ECX,ECX
::00404AA2:: 41 INC ECX
::00404AA3:: 51 PUSH ECX
::00404AA4:: 83F9 02 CMP ECX,2
::00404AA7:: 0F8F 31000000 JG 00404ADE
::00404AAD:: FF75 E8 PUSH DWORD PTR [EBP-18]
::00404AB0:: FF75 E8 PUSH DWORD PTR [EBP-18]
::00404AB3:: B9 02000000 MOV ECX,2
::00404AB8:: E8 E0F8FFFF CALL 0040439D
::00404ABD:: 83C4 08 ADD ESP,8
::00404AC0:: 8945 E0 MOV [EBP-20],EAX
::00404AC3:: 8B45 E0 MOV EAX,[EBP-20]
::00404AC6:: 50 PUSH EAX
::00404AC7:: 8B5D E8 MOV EBX,[EBP-18]
::00404ACA:: 85DB TEST EBX,EBX
::00404ACC:: 74 09 JE SHORT 00404AD7
::00404ACE:: 53 PUSH EBX
::00404ACF:: E8 74150000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404AD4:: 83C4 04 ADD ESP,4
::00404AD7:: 58 POP EAX
::00404AD8:: 8945 E8 MOV [EBP-18],EAX
::00404ADB:: 59 POP ECX
::00404ADC:: EB C4 JMP SHORT 00404AA2
::00404ADE:: 83C4 04 ADD ESP,4
::00404AE1:: 68 D9324000 PUSH 4032D9 (常量)
::00404AE6:: FF75 E8 PUSH DWORD PTR [EBP-18]
::00404AE9:: FF75 EC PUSH DWORD PTR [EBP-14]
::00404AEC:: FF75 F0 PUSH DWORD PTR [EBP-10]
::00404AEF:: FF75 F4 PUSH DWORD PTR [EBP-C]
::00404AF2:: B9 05000000 MOV ECX,5
::00404AF7:: E8 A1F8FFFF CALL 0040439D
::00404AFC:: 83C4 14 ADD ESP,14
::00404AFF:: 8945 E0 MOV [EBP-20],EAX
::00404B02:: 6A 00 PUSH 0
::00404B04:: FF75 E0 PUSH DWORD PTR [EBP-20]
::00404B07:: 6A FF PUSH -1
::00404B09:: 6A 0A PUSH A 图片(“图片框1”的属性)
::00404B0B:: 68 6A000116 PUSH 1601006A 图片框1(图片框)
::00404B10:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404B15:: E8 58150000 CALL 00406072 修改窗体对象属性(调用5号服务)
::00404B1A:: 83C4 18 ADD ESP,18
::00404B1D:: 8B5D E0 MOV EBX,[EBP-20]
::00404B20:: 85DB TEST EBX,EBX
::00404B22:: 74 09 JE SHORT 00404B2D
::00404B24:: 53 PUSH EBX
::00404B25:: E8 1E150000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404B2A:: 83C4 04 ADD ESP,4
::00404B2D:: 6A FF PUSH -1
::00404B2F:: 6A 0A PUSH A 图片(“图片框1”的属性)
::00404B31:: 68 6A000116 PUSH 1601006A 图片框1(图片框)
::00404B36:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404B3B:: E8 20150000 CALL 00406060 取窗体对象属性(调用4号服务)
::00404B40:: 83C4 10 ADD ESP,10
::00404B43:: 8945 E0 MOV [EBP-20],EAX
::00404B46:: 8B45 E0 MOV EAX,[EBP-20]
::00404B49:: 50 PUSH EAX
::00404B4A:: 8B5D E4 MOV EBX,[EBP-1C]
::00404B4D:: 85DB TEST EBX,EBX
::00404B4F:: 74 09 JE SHORT 00404B5A
::00404B51:: 53 PUSH EBX
::00404B52:: E8 F1140000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404B57:: 83C4 04 ADD ESP,4
::00404B5A:: 58 POP EAX
::00404B5B:: 8945 E4 MOV [EBP-1C],EAX
::00404B5E:: BB 06000000 MOV EBX,6
::00404B63:: E8 8CF8FFFF CALL 004043F4
::00404B68:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::00404B6D:: 6A 00 PUSH 0
::00404B6F:: 68 5C334000 PUSH 40335C (常量)
::00404B74:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::00404B79:: 6A 00 PUSH 0
::00404B7B:: 68 67334000 PUSH 403367 (常量)
::00404B80:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::00404B85:: 6A 00 PUSH 0
::00404B87:: 8B45 E4 MOV EAX,[EBP-1C]
::00404B8A:: 85C0 TEST EAX,EAX
::00404B8C:: 75 05 JNZ SHORT 00404B93
::00404B8E:: B8 A8324000 MOV EAX,4032A8 (常量)
::00404B93:: 50 PUSH EAX
::00404B94:: 68 05000000 PUSH 5
::00404B99:: BB B8010000 MOV EBX,1B8 子字节集替换(系统核心支持库)
::00404B9E:: E8 B1140000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404BA3:: 83C4 40 ADD ESP,40
::00404BA6:: 8945 E0 MOV [EBP-20],EAX
::00404BA9:: 8B45 E0 MOV EAX,[EBP-20]
::00404BAC:: 50 PUSH EAX
::00404BAD:: 8B5D E4 MOV EBX,[EBP-1C]
::00404BB0:: 85DB TEST EBX,EBX
::00404BB2:: 74 09 JE SHORT 00404BBD
::00404BB4:: 53 PUSH EBX
::00404BB5:: E8 8E140000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404BBA:: 83C4 04 ADD ESP,4
::00404BBD:: 58 POP EAX
::00404BBE:: 8945 E4 MOV [EBP-1C],EAX
::00404BC1:: BB 06000000 MOV EBX,6
::00404BC6:: E8 29F8FFFF CALL 004043F4
::00404BCB:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::00404BD0:: 6A 00 PUSH 0
::00404BD2:: 68 72334000 PUSH 403372 (常量)
::00404BD7:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::00404BDC:: 6A 00 PUSH 0
::00404BDE:: 68 7E334000 PUSH 40337E (常量)
::00404BE3:: 68 05000080 PUSH 80000005 字节集(基本数据类型)
::00404BE8:: 6A 00 PUSH 0
::00404BEA:: 8B45 E4 MOV EAX,[EBP-1C]
::00404BED:: 85C0 TEST EAX,EAX
::00404BEF:: 75 05 JNZ SHORT 00404BF6
::00404BF1:: B8 A8324000 MOV EAX,4032A8 (常量)
::00404BF6:: 50 PUSH EAX
::00404BF7:: 68 05000000 PUSH 5
::00404BFC:: BB B8010000 MOV EBX,1B8 子字节集替换(系统核心支持库)
::00404C01:: E8 4E140000 CALL 00406054 调用核心支持库命令(调用3号服务)
::00404C06:: 83C4 40 ADD ESP,40
::00404C09:: 8945 E0 MOV [EBP-20],EAX
::00404C0C:: 8B45 E0 MOV EAX,[EBP-20]
::00404C0F:: 50 PUSH EAX
::00404C10:: 8B5D E4 MOV EBX,[EBP-1C]
::00404C13:: 85DB TEST EBX,EBX
::00404C15:: 74 09 JE SHORT 00404C20
::00404C17:: 53 PUSH EBX
::00404C18:: E8 2B140000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404C1D:: 83C4 04 ADD ESP,4
::00404C20:: 58 POP EAX
::00404C21:: 8945 E4 MOV [EBP-1C],EAX
::00404C24:: 6A 00 PUSH 0
::00404C26:: FF75 E4 PUSH DWORD PTR [EBP-1C]
::00404C29:: 6A FF PUSH -1
::00404C2B:: 6A 0A PUSH A 图片(“图片框1”的属性)
::00404C2D:: 68 6A000116 PUSH 1601006A 图片框1(图片框)
::00404C32:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404C37:: E8 36140000 CALL 00406072 修改窗体对象属性(调用5号服务)
::00404C3C:: 83C4 18 ADD ESP,18
::00404C3F:: 58 POP EAX
::00404C40:: 59 POP ECX
::00404C41:: E9 2EFAFFFF JMP 00404674
::00404C46:: 83C4 08 ADD ESP,8
::00404C49:: 58 POP EAX
::00404C4A:: 59 POP ECX
::00404C4B:: E9 4EF9FFFF JMP 0040459E
::00404C50:: 83C4 08 ADD ESP,8
::00404C53:: 6A 00 PUSH 0
::00404C55:: 68 00000000 PUSH 0
::00404C5A:: 6A FF PUSH -1
::00404C5C:: 6A 08 PUSH 8 时钟周期(“时钟4”的属性)
::00404C5E:: 68 71000116 PUSH 16010071 时钟4(时钟)
::00404C63:: 68 01000152 PUSH 52010001 窗体单元1(父窗体)
::00404C68:: E8 05140000 CALL 00406072 修改窗体对象属性(调用5号服务)
::00404C6D:: 83C4 18 ADD ESP,18
::00404C70:: 8B5D F4 MOV EBX,[EBP-C]
::00404C73:: 85DB TEST EBX,EBX
::00404C75:: 74 09 JE SHORT 00404C80
::00404C77:: 53 PUSH EBX
::00404C78:: E8 CB130000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404C7D:: 83C4 04 ADD ESP,4
::00404C80:: 8B5D F0 MOV EBX,[EBP-10]
::00404C83:: 85DB TEST EBX,EBX
::00404C85:: 74 09 JE SHORT 00404C90
::00404C87:: 53 PUSH EBX
::00404C88:: E8 BB130000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404C8D:: 83C4 04 ADD ESP,4
::00404C90:: 8B5D EC MOV EBX,[EBP-14]
::00404C93:: 85DB TEST EBX,EBX
::00404C95:: 74 09 JE SHORT 00404CA0
::00404C97:: 53 PUSH EBX
::00404C98:: E8 AB130000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404C9D:: 83C4 04 ADD ESP,4
::00404CA0:: 8B5D E8 MOV EBX,[EBP-18]
::00404CA3:: 85DB TEST EBX,EBX
::00404CA5:: 74 09 JE SHORT 00404CB0
::00404CA7:: 53 PUSH EBX
::00404CA8:: E8 9B130000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404CAD:: 83C4 04 ADD ESP,4
::00404CB0:: 8B5D E4 MOV EBX,[EBP-1C]
::00404CB3:: 85DB TEST EBX,EBX
::00404CB5:: 74 09 JE SHORT 00404CC0
::00404CB7:: 53 PUSH EBX
::00404CB8:: E8 8B130000 CALL 00406048 销毁从堆上分配到的内存(调用8号服务)
::00404CBD:: 83C4 04 ADD ESP,4
::00404CC0:: 8BE5 MOV ESP,EBP
::00404CC2:: 5D POP EBP
::00404CC3:: C3 RETN
收工!
一个精简去Anti的文件: