- UID
- 33252
注册时间2007-8-4
阅读权限40
最后登录1970-1-1
独步武林
 
TA的每日心情 | 无聊
2024-12-30 17:29 |
|---|
签到天数: 633 天 [LV.9]以坛为家II
|
【文章标题】: 屏幕录像专家V7.5build20090710追注码B
【文章作者】: fghtiger
【作者邮箱】: [email protected]
【作者QQ号】: 28011309
【下载地址】: 自己搜索下载
【作者声明】: 只是感兴趣，没有其他目的。失误之处敬请诸位大侠赐教!
--------------------------------------------------------------------------------
【详细过程】
上次追出了点注册按钮时的注册码，这次分析下点开始录制按钮后的注册码和点EXE转换FLASH按钮的注册码。
0040BC10 > 55 push ebp ; 开始录制按钮
0040BC11 8BEC mov ebp, esp
0040BC13 81C4 54FBFFFF add esp, -4AC
0040BC19 B8 64E65600 mov eax, 0056E664
0040BC1E 53 push ebx
0040BC1F 56 push esi
0040BC20 57 push edi
0040BC21 8B5D 08 mov ebx, dword ptr [ebp+8]
0040BC24 E8 AF6F1200 call <@__InitExceptBlockLDTC>
0040BC29 66:C785 7CFFFFF>mov word ptr [ebp-84], 8
0040BC32 8D45 FC lea eax, dword ptr [ebp-4]
0040BC35 E8 1E5DFFFF call <unknown_libname_55>
0040BC3A FF45 88 inc dword ptr [ebp-78]
0040BC3D 66:C785 7CFFFFF>mov word ptr [ebp-84], 14
0040BC46 6A 28 push 28
0040BC48 8B55 0C mov edx, dword ptr [ebp+C]
0040BC4B 52 push edx
0040BC4C 8D8B 701A0000 lea ecx, dword ptr [ebx+1A70]
0040BC52 51 push ecx
0040BC53 E8 DC6A1200 call <_memcpy>
0040BC58 83C4 0C add esp, 0C
0040BC5B 66:C785 7CFFFFF>mov word ptr [ebp-84], 20
0040BC64 8D45 F8 lea eax, dword ptr [ebp-8]
0040BC67 E8 EC5CFFFF call <unknown_libname_55>
0040BC6C FF45 88 inc dword ptr [ebp-78]
0040BC6F 66:C785 7CFFFFF>mov word ptr [ebp-84], 14
0040BC78 8B83 B4060000 mov eax, dword ptr [ebx+6B4]
0040BC7E 8B10 mov edx, dword ptr [eax]
0040BC80 FF52 4C call dword ptr [edx+4C]
0040BC83 3C 01 cmp al, 1
0040BC85 0F85 9C010000 jnz <loc_40BE27>
0040BC8B 8B83 B4060000 mov eax, dword ptr [ebx+6B4]
0040BC91 8B10 mov edx, dword ptr [eax]
0040BC93 FF92 B4000000 call dword ptr [edx+B4]
0040BC99 3C 01 cmp al, 1
0040BC9B 0F85 86010000 jnz <loc_40BE27>
0040BCA1 8B83 38030000 mov eax, dword ptr [ebx+338]
0040BCA7 8B10 mov edx, dword ptr [eax]
0040BCA9 FF92 B4000000 call dword ptr [edx+B4]
0040BCAF 3C 01 cmp al, 1
0040BCB1 0F85 70010000 jnz <loc_40BE27>
0040BCB7 8B8B 980D0000 mov ecx, dword ptr [ebx+D98]
0040BCBD 51 push ecx
0040BCBE E8 09190100 call <sub_41D5CC>
0040BCC3 59 pop ecx
0040BCC4 84C0 test al, al
0040BCC6 0F85 CE000000 jnz <loc_40BD9A>
0040BCCC 66:C785 7CFFFFF>mov word ptr [ebp-84], 38
0040BCD5 8B83 980D0000 mov eax, dword ptr [ebx+D98]
0040BCDB 50 push eax
0040BCDC 8D45 F4 lea eax, dword ptr [ebp-C]
0040BCDF E8 745CFFFF call <unknown_libname_55>
0040BCE4 50 push eax
0040BCE5 FF45 88 inc dword ptr [ebp-78]
0040BCE8 E8 77FB0900 call <sub_4AB864>
0040BCED 66:C785 7CFFFFF>mov word ptr [ebp-84], 2C
0040BCF6 66:C785 7CFFFFF>mov word ptr [ebp-84], 44
0040BCFF 83C4 08 add esp, 8
0040BD02 BA 72F55500 mov edx, 0055F572
0040BD07 8D45 F0 lea eax, dword ptr [ebp-10]
0040BD0A E8 D5521300 call <sub_540FE4>
0040BD0F FF45 88 inc dword ptr [ebp-78]
0040BD12 8D55 F0 lea edx, dword ptr [ebp-10]
0040BD15 8D45 F4 lea eax, dword ptr [ebp-C]
0040BD18 E8 6F561300 call <@System@AnsiString@$bneq$>
0040BD1D 50 push eax
0040BD1E FF4D 88 dec dword ptr [ebp-78]
0040BD21 8D45 F0 lea eax, dword ptr [ebp-10]
0040BD24 BA 02000000 mov edx, 2
0040BD29 E8 62551300 call <sub_541290>
0040BD2E 59 pop ecx
0040BD2F 84C9 test cl, cl
0040BD31 74 4E je short <loc_40BD81>
0040BD33 8B45 F4 mov eax, dword ptr [ebp-C]
0040BD36 E8 69BF0E00 call <@Dialogs@ShowMessage$qqrx>
0040BD3B 33C0 xor eax, eax
0040BD3D BA 02000000 mov edx, 2
0040BD42 50 push eax
0040BD43 8D45 F4 lea eax, dword ptr [ebp-C]
0040BD46 FF4D 88 dec dword ptr [ebp-78]
0040BD49 E8 42551300 call <sub_541290>
0040BD4E FF4D 88 dec dword ptr [ebp-78]
0040BD51 8D45 F8 lea eax, dword ptr [ebp-8]
0040BD54 BA 02000000 mov edx, 2
0040BD59 E8 32551300 call <sub_541290>
0040BD5E FF4D 88 dec dword ptr [ebp-78]
0040BD61 8D45 FC lea eax, dword ptr [ebp-4]
0040BD64 BA 02000000 mov edx, 2
0040BD69 E8 22551300 call <sub_541290>
0040BD6E 58 pop eax
0040BD6F 8B95 6CFFFFFF mov edx, dword ptr [ebp-94]
0040BD75 64:8915 0000000>mov dword ptr fs:[0], edx
0040BD7C E9 970B0000 jmp <loc_40C918>
0040BD81 > FF4D 88 dec dword ptr [ebp-78]
0040BD84 8D45 F4 lea eax, dword ptr [ebp-C]
0040BD87 BA 02000000 mov edx, 2
0040BD8C E8 FF541300 call <sub_541290>
0040BD91 66:C785 7CFFFFF>mov word ptr [ebp-84], 14
0040BD9A > B8 02000000 mov eax, 2
0040BD9F 8983 9C0D0000 mov dword ptr [ebx+D9C], eax
0040BDA5 50 push eax
0040BDA6 8B93 980D0000 mov edx, dword ptr [ebx+D98]
0040BDAC 52 push edx
0040BDAD E8 12F70900 call <sub_4AB4C4>
0040BDB2 83C4 08 add esp, 8
0040BDB5 84C0 test al, al
0040BDB7 75 6E jnz short <loc_40BE27>
0040BDB9 33C9 xor ecx, ecx
0040BDBB BA 73F55500 mov edx, 0055F573 ; mirror start error
0040BDC0 898B 9C0D0000 mov dword ptr [ebx+D9C], ecx
0040BDC6 8D45 EC lea eax, dword ptr [ebp-14]
0040BDC9 66:C785 7CFFFFF>mov word ptr [ebp-84], 50
0040BDD2 E8 0D521300 call <sub_540FE4>
0040BDD7 FF45 88 inc dword ptr [ebp-78]
0040BDDA 8B00 mov eax, dword ptr [eax]
0040BDDC E8 C3BE0E00 call <@Dialogs@ShowMessage$qqrx>
0040BDE1 FF4D 88 dec dword ptr [ebp-78]
0040BDE4 8D45 EC lea eax, dword ptr [ebp-14]
0040BDE7 BA 02000000 mov edx, 2
0040BDEC E8 9F541300 call <sub_541290>
0040BDF1 33C0 xor eax, eax
0040BDF3 BA 02000000 mov edx, 2
0040BDF8 50 push eax
0040BDF9 8D45 F8 lea eax, dword ptr [ebp-8]
0040BDFC FF4D 88 dec dword ptr [ebp-78]
0040BDFF E8 8C541300 call <sub_541290>
0040BE04 FF4D 88 dec dword ptr [ebp-78]
0040BE07 8D45 FC lea eax, dword ptr [ebp-4]
0040BE0A BA 02000000 mov edx, 2
0040BE0F E8 7C541300 call <sub_541290>
0040BE14 58 pop eax
0040BE15 8B95 6CFFFFFF mov edx, dword ptr [ebp-94]
0040BE1B 64:8915 0000000>mov dword ptr fs:[0], edx
0040BE22 E9 F10A0000 jmp <loc_40C918>
0040BE27 > 33C9 xor ecx, ecx
0040BE29 898B 68130000 mov dword ptr [ebx+1368], ecx
0040BE2F 66:C785 7CFFFFF>mov word ptr [ebp-84], 5C
0040BE38 8D45 E8 lea eax, dword ptr [ebp-18]
0040BE3B E8 185BFFFF call <unknown_libname_55>
0040BE40 8BD0 mov edx, eax
0040BE42 FF45 88 inc dword ptr [ebp-78]
0040BE45 8B83 40040000 mov eax, dword ptr [ebx+440]
0040BE4B E8 84120F00 call <@TControl@GetText$qqrv>
0040BE50 8D55 E8 lea edx, dword ptr [ebp-18]
0040BE53 8B0A mov ecx, dword ptr [edx]
0040BE55 51 push ecx
0040BE56 E8 41AB0800 call <sub_49699C>
0040BE5B 3C 01 cmp al, 1
0040BE5D 59 pop ecx
0040BE5E 0F94C0 sete al
0040BE61 83E0 01 and eax, 1
0040BE64 BA 02000000 mov edx, 2
0040BE69 50 push eax
0040BE6A 8D45 E8 lea eax, dword ptr [ebp-18]
0040BE6D FF4D 88 dec dword ptr [ebp-78]
0040BE70 E8 1B541300 call <sub_541290>
0040BE75 59 pop ecx
0040BE76 84C9 test cl, cl
0040BE78 74 59 je short <loc_40BED3>
0040BE7A 66:C785 7CFFFFF>mov word ptr [ebp-84], 68
0040BE83 8D45 E4 lea eax, dword ptr [ebp-1C]
0040BE86 E8 CD5AFFFF call <unknown_libname_55>
0040BE8B 8BD0 mov edx, eax
0040BE8D FF45 88 inc dword ptr [ebp-78]
0040BE90 8B83 40040000 mov eax, dword ptr [ebx+440]
0040BE96 E8 39120F00 call <@TControl@GetText$qqrv>
0040BE9B 8D45 E4 lea eax, dword ptr [ebp-1C]
0040BE9E E8 4D571300 call <@System@AnsiString@ToDoub>
0040BEA3 E8 6CDA1200 call <@_ftol$qv>
0040BEA8 8983 64130000 mov dword ptr [ebx+1364], eax
0040BEAE FF4D 88 dec dword ptr [ebp-78]
0040BEB1 8D45 E4 lea eax, dword ptr [ebp-1C]
0040BEB4 BA 02000000 mov edx, 2
0040BEB9 E8 D2531300 call <sub_541290>
0040BEBE 83BB 64130000 0>cmp dword ptr [ebx+1364], 1
0040BEC5 7D 16 jge short <loc_40BEDD>
0040BEC7 C783 64130000 6>mov dword ptr [ebx+1364], 64
0040BED1 EB 0A jmp short <loc_40BEDD>
0040BED3 > C783 64130000 6>mov dword ptr [ebx+1364], 64
0040BEDD > E8 02CE1100 call <@Sysutils@Date$qqrv>
0040BEE2 DD9D 60FFFFFF fstp qword ptr [ebp-A0]
0040BEE8 8D85 60FFFFFF lea eax, dword ptr [ebp-A0]
0040BEEE E8 317B0400 call <sub_453A24>
0040BEF3 B9 03000000 mov ecx, 3
0040BEF8 99 cdq
0040BEF9 F7F9 idiv ecx
0040BEFB 85D2 test edx, edx
0040BEFD 75 2E jnz short <loc_40BF2D>
0040BEFF 66:C785 7CFFFFF>mov word ptr [ebp-84], 74
0040BF08 53 push ebx
0040BF09 8D45 E0 lea eax, dword ptr [ebp-20]
0040BF0C E8 475AFFFF call <unknown_libname_55>
0040BF11 50 push eax
0040BF12 FF45 88 inc dword ptr [ebp-78]
0040BF15 E8 EA240100 call <sub_41E404>
0040BF1A 83C4 08 add esp, 8
0040BF1D FF4D 88 dec dword ptr [ebp-78]
0040BF20 8D45 E0 lea eax, dword ptr [ebp-20]
0040BF23 BA 02000000 mov edx, 2
0040BF28 E8 63531300 call <sub_541290>
0040BF2D > B2 01 mov dl, 1
0040BF2F A1 58884D00 mov eax, dword ptr [<off_4D885>; 揣Q
0040BF34 E8 AB2A0D00 call <@Graphics@TBitmap@$bctr$q>
0040BF39 8BF0 mov esi, eax
0040BF3B 89B3 70130000 mov dword ptr [ebx+1370], esi
0040BF41 8B83 3C1A0000 mov eax, dword ptr [ebx+1A3C]
0040BF47 8B10 mov edx, dword ptr [eax]
0040BF49 FF52 2C call dword ptr [edx+2C]
0040BF4C 8BD0 mov edx, eax
0040BF4E 8BC6 mov eax, esi
0040BF50 8B08 mov ecx, dword ptr [eax]
0040BF52 FF51 40 call dword ptr [ecx+40]
0040BF55 8BB3 70130000 mov esi, dword ptr [ebx+1370]
0040BF5B 8B83 3C1A0000 mov eax, dword ptr [ebx+1A3C]
0040BF61 8B10 mov edx, dword ptr [eax]
0040BF63 FF52 20 call dword ptr [edx+20]
0040BF66 8BD0 mov edx, eax
0040BF68 8B83 70130000 mov eax, dword ptr [ebx+1370]
0040BF6E 8B08 mov ecx, dword ptr [eax]
0040BF70 FF51 34 call dword ptr [ecx+34]
0040BF73 8BC6 mov eax, esi
0040BF75 B9 0A000000 mov ecx, 0A
0040BF7A 99 cdq
0040BF7B F7F9 idiv ecx
0040BF7D 83FA 06 cmp edx, 6 ; 与6比较 如果等于6 就不跳检测注册码
0040BF80 75 55 jnz short <loc_40BFD7>
0040BF82 53 push ebx
0040BF83 E8 1C980400 call <sub_4557A4>
0040BF88 59 pop ecx
0040BF89 8B83 7C080000 mov eax, dword ptr [ebx+87C]
0040BF8F 05 444D0000 add eax, 4D44 ; eax值就是上篇说的用户名与变换后的机器码运算得到的一个值
0040BF94 8985 54FBFFFF mov dword ptr [ebp-4AC], eax
0040BF9A DB85 54FBFFFF fild dword ptr [ebp-4AC]
0040BFA0 DC0D 20C94000 fmul qword ptr [<dbl_40C920>]
0040BFA6 DB2D 28C94000 fld tbyte ptr [<tbyte_40C928>]
0040BFAC DEC9 fmulp st(1), st(0)
0040BFAE E8 61D91200 call <@_ftol$qv>
0040BFB3 8BF8 mov edi, eax
0040BFB5 B9 A0860100 mov ecx, 186A0
0040BFBA 8BC7 mov eax, edi
0040BFBC 89BB 94080000 mov dword ptr [ebx+894], edi
0040BFC2 99 cdq
0040BFC3 F7F9 idiv ecx
0040BFC5 8D83 94080000 lea eax, dword ptr [ebx+894]
0040BFCB 8993 94080000 mov dword ptr [ebx+894], edx ; EDX=eax*3.14*0.15948
0040BFD1 8983 9C080000 mov dword ptr [ebx+89C], eax
0040BFD7 > 8B83 3C1A0000 mov eax, dword ptr [ebx+1A3C]
0040BFDD E8 52300D00 call <@Graphics@TBitmap@GetPixe>
0040BFE2 8BD0 mov edx, eax
0040BFE4 > 8B83 70130000 mov eax, dword ptr [ebx+1370]
0040BFEA E8 653F0D00 call <@Graphics@TBitmap@SetPixe>
0040BFEF 66:C785 7CFFFFF>mov word ptr [ebp-84], 80
0040BFF8 8D45 D8 lea eax, dword ptr [ebp-28]
0040BFFB E8 5859FFFF call <unknown_libname_55>
0040C000 50 push eax
0040C001 FF45 88 inc dword ptr [ebp-78]
0040C004 BA 86F55500 mov edx, 0055F586 ; play.dat
0040C009 8D45 DC lea eax, dword ptr [ebp-24]
0040C00C > E8 D34F1300 call <sub_540FE4>
0040C011 FF45 88 inc dword ptr [ebp-78]
0040C014 8D55 DC lea edx, dword ptr [ebp-24]
0040C017 8D83 F8190000 lea eax, dword ptr [ebx+19F8]
0040C01D 59 pop ecx
0040C01E E8 C5521300 call <@System@AnsiString@$badd$>
0040C023 8D55 D8 lea edx, dword ptr [ebp-28]
0040C026 8D45 FC lea eax, dword ptr [ebp-4]
0040C029 E8 92521300 call <sub_5412C0>
0040C02E FF4D 88 dec dword ptr [ebp-78]
0040C031 8D45 D8 lea eax, dword ptr [ebp-28]
0040C034 BA 02000000 mov edx, 2
0040C039 E8 52521300 call <sub_541290>
0040C03E FF4D 88 dec dword ptr [ebp-78]
0040C041 8D45 DC lea eax, dword ptr [ebp-24]
0040C044 BA 02000000 mov edx, 2
0040C049 E8 42521300 call <sub_541290>
0040C04E 66:C785 7CFFFFF>mov word ptr [ebp-84], 8C
0040C057 6A 00 push 0
0040C059 6A 00 push 0
0040C05B 6A 01 push 1
0040C05D 53 push ebx
0040C05E 8D45 D4 lea eax, dword ptr [ebp-2C]
0040C061 E8 F258FFFF call <unknown_libname_55>
0040C066 50 push eax
0040C067 FF45 88 inc dword ptr [ebp-78]
0040C06A E8 A1EDFFFF call <sub_40AE10>
0040C06F 83C4 14 add esp, 14
0040C072 8D55 D4 lea edx, dword ptr [ebp-2C]
0040C075 8DBB F40D0000 lea edi, dword ptr [ebx+DF4]
0040C07B 8BC7 mov eax, edi
0040C07D E8 3E521300 call <sub_5412C0>
0040C082 FF4D 88 dec dword ptr [ebp-78]
0040C085 8D45 D4 lea eax, dword ptr [ebp-2C]
0040C088 BA 02000000 mov edx, 2
0040C08D E8 FE511300 call <sub_541290>
0040C092 6A 00 push 0
0040C094 8BC7 mov eax, edi
0040C096 E8 1160FFFF call <sub_4020AC>
0040C09B 50 push eax
0040C09C 8D45 FC lea eax, dword ptr [ebp-4]
0040C09F E8 0860FFFF call <sub_4020AC>
0040C0A4 50 push eax
0040C0A5 E8 DA961400 call <CopyFileA> ; jmp 到 kernel32.CopyFileA
0040C0AA 85C0 test eax, eax
0040C0AC 0F85 A8010000 jnz <loc_40C25A>
0040C0B2 6A 00 push 0
0040C0B4 8D95 5CFFFFFF lea edx, dword ptr [ebp-A4]
0040C0BA 6A 00 push 0
0040C0BC 52 push edx
0040C0BD 68 00040000 push 400
0040C0C2 E8 AD971400 call <GetLastError> ; jmp 到 ntdll.RtlGetLastWin32Error
0040C0C7 50 push eax
0040C0C8 6A 00 push 0
0040C0CA 68 00110000 push 1100
0040C0CF E8 34971400 call <FormatMessageA> ; jmp 到 kernel32.FormatMessageA
0040C0D4 66:C785 7CFFFFF>mov word ptr [ebp-84], 98
0040C0DD 8D45 D0 lea eax, dword ptr [ebp-30]
0040C0E0 E8 7358FFFF call <unknown_libname_55>
0040C0E5 8BC8 mov ecx, eax
0040C0E7 FF45 88 inc dword ptr [ebp-78]
0040C0EA 8D55 FC lea edx, dword ptr [ebp-4]
0040C0ED B8 8FF55500 mov eax, 0055F58F ; 拷贝文件失败:
0040C0F2 E8 C1551300 call <@System@$badd$qqrpxcrx17S>
0040C0F7 8D55 D0 lea edx, dword ptr [ebp-30]
0040C0FA 8D45 C8 lea eax, dword ptr [ebp-38]
0040C0FD 52 push edx
0040C0FE E8 5558FFFF call <unknown_libname_55>
0040C103 50 push eax
0040C104 FF45 88 inc dword ptr [ebp-78]
0040C107 BA 9DF55500 mov edx, 0055F59D ; ->
0040C10C 8D45 CC lea eax, dword ptr [ebp-34]
0040C10F E8 D04E1300 call <sub_540FE4>
0040C114 FF45 88 inc dword ptr [ebp-78]
0040C117 8D55 CC lea edx, dword ptr [ebp-34]
0040C11A 59 pop ecx
0040C11B 58 pop eax
0040C11C E8 C7511300 call <@System@AnsiString@$badd$>
0040C121 8D55 C8 lea edx, dword ptr [ebp-38]
0040C124 8D45 C4 lea eax, dword ptr [ebp-3C]
0040C127 52 push edx
0040C128 E8 2B58FFFF call <unknown_libname_55>
0040C12D 8BC8 mov ecx, eax
0040C12F FF45 88 inc dword ptr [ebp-78]
0040C132 8BD7 mov edx, edi
0040C134 > 58 pop eax
0040C135 E8 AE511300 call <@System@AnsiString@$badd$>
0040C13A 8D55 C4 lea edx, dword ptr [ebp-3C]
0040C13D 8D45 BC lea eax, dword ptr [ebp-44]
0040C140 52 push edx
0040C141 E8 1258FFFF call <unknown_libname_55>
0040C146 50 push eax
0040C147 FF45 88 inc dword ptr [ebp-78]
0040C14A BA A0F55500 mov edx, 0055F5A0 ; 原因:
0040C14F 8D45 C0 lea eax, dword ptr [ebp-40]
0040C152 E8 8D4E1300 call <sub_540FE4>
0040C157 FF45 88 inc dword ptr [ebp-78]
0040C15A 8D55 C0 lea edx, dword ptr [ebp-40]
0040C15D 59 pop ecx
0040C15E 58 pop eax
0040C15F E8 84511300 call <@System@AnsiString@$badd$>
0040C164 8D55 BC lea edx, dword ptr [ebp-44]
0040C167 8D45 B4 lea eax, dword ptr [ebp-4C]
0040C16A 52 push edx
0040C16B E8 E857FFFF call <unknown_libname_55>
0040C170 50 push eax
0040C171 FF45 88 inc dword ptr [ebp-78]
0040C174 8D45 B8 lea eax, dword ptr [ebp-48]
0040C177 8B95 5CFFFFFF mov edx, dword ptr [ebp-A4]
0040C17D E8 624E1300 call <sub_540FE4>
0040C182 8BD0 mov edx, eax
0040C184 FF45 88 inc dword ptr [ebp-78]
0040C187 59 pop ecx
0040C188 58 pop eax
0040C189 E8 5A511300 call <@System@AnsiString@$badd$>
0040C18E 8D45 B4 lea eax, dword ptr [ebp-4C]
0040C191 8B00 mov eax, dword ptr [eax]
0040C193 E8 0CBB0E00 call <@Dialogs@ShowMessage$qqrx>
0040C198 FF4D 88 dec dword ptr [ebp-78]
0040C19B 8D45 B4 lea eax, dword ptr [ebp-4C]
0040C19E BA 02000000 mov edx, 2
0040C1A3 E8 E8501300 call <sub_541290>
0040C1A8 FF4D 88 dec dword ptr [ebp-78]
0040C1AB 8D45 B8 lea eax, dword ptr [ebp-48]
0040C1AE BA 02000000 mov edx, 2
0040C1B3 E8 D8501300 call <sub_541290>
0040C1B8 FF4D 88 dec dword ptr [ebp-78]
0040C1BB 8D45 BC lea eax, dword ptr [ebp-44]
0040C1BE BA 02000000 mov edx, 2
0040C1C3 E8 C8501300 call <sub_541290>
0040C1C8 FF4D 88 dec dword ptr [ebp-78]
0040C1CB 8D45 C0 lea eax, dword ptr [ebp-40]
0040C1CE BA 02000000 mov edx, 2
0040C1D3 E8 B8501300 call <sub_541290>
0040C1D8 FF4D 88 dec dword ptr [ebp-78]
0040C1DB 8D45 C4 lea eax, dword ptr [ebp-3C]
0040C1DE BA 02000000 mov edx, 2
0040C1E3 E8 A8501300 call <sub_541290>
0040C1E8 > FF4D 88 dec dword ptr [ebp-78]
0040C1EB 8D45 C8 lea eax, dword ptr [ebp-38]
0040C1EE BA 02000000 mov edx, 2
0040C1F3 E8 98501300 call <sub_541290>
0040C1F8 FF4D 88 dec dword ptr [ebp-78]
0040C1FB 8D45 CC lea eax, dword ptr [ebp-34]
0040C1FE BA 02000000 mov edx, 2
0040C203 E8 88501300 call <sub_541290>
0040C208 FF4D 88 dec dword ptr [ebp-78]
0040C20B 8D45 D0 lea eax, dword ptr [ebp-30]
0040C20E BA 02000000 mov edx, 2
0040C213 E8 78501300 call <sub_541290>
0040C218 8B8D 5CFFFFFF mov ecx, dword ptr [ebp-A4]
0040C21E 51 push ecx
0040C21F E8 6A971400 call <LocalFree> ; jmp 到 kernel32.LocalFree
0040C224 33C0 xor eax, eax
0040C226 BA 02000000 mov edx, 2
0040C22B 50 push eax
0040C22C 8D45 F8 lea eax, dword ptr [ebp-8]
0040C22F FF4D 88 dec dword ptr [ebp-78]
0040C232 E8 59501300 call <sub_541290>
0040C237 FF4D 88 dec dword ptr [ebp-78]
0040C23A 8D45 FC lea eax, dword ptr [ebp-4]
0040C23D BA 02000000 mov edx, 2
0040C242 E8 49501300 call <sub_541290>
0040C247 58 pop eax
0040C248 8B95 6CFFFFFF mov edx, dword ptr [ebp-94]
0040C24E 64:8915 0000000>mov dword ptr fs:[0], edx
0040C255 E9 BE060000 jmp <loc_40C918>
0040C25A > 6A 02 push 2
0040C25C 8B8B F40D0000 mov ecx, dword ptr [ebx+DF4]
0040C262 B2 01 mov dl, 1
0040C264 A1 048F5100 mov eax, dword ptr [<off_518F0>
0040C269 E8 FE021100 call <@Classes@TFileStream@$bct>
0040C26E 8BF8 mov edi, eax
0040C270 33D2 xor edx, edx
0040C272 8BC7 mov eax, edi
0040C274 89BB 74130000 mov dword ptr [ebx+1374], edi
0040C27A 66:B9 0200 mov cx, 2
0040C27E 8B38 mov edi, dword ptr [eax]
0040C280 FF57 0C call dword ptr [edi+C]
0040C283 33C0 xor eax, eax
0040C285 8985 68FFFFFF mov dword ptr [ebp-98], eax
0040C28B 8D95 68FFFFFF lea edx, dword ptr [ebp-98]
0040C291 B9 04000000 mov ecx, 4
0040C296 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C29C 8B38 mov edi, dword ptr [eax]
0040C29E FF57 08 call dword ptr [edi+8]
0040C2A1 8BC6 mov eax, esi
0040C2A3 B9 0A000000 mov ecx, 0A
0040C2A8 99 cdq
0040C2A9 F7F9 idiv ecx
0040C2AB 83FA 06 cmp edx, 6 ; 再次与6比较 不要跳 比较注册码
0040C2AE 0F85 54020000 jnz <loc_40C508>
0040C2B4 66:C785 7CFFFFF>mov word ptr [ebp-84], 0A4
0040C2BD 8D45 B0 lea eax, dword ptr [ebp-50]
0040C2C0 E8 9356FFFF call <unknown_libname_55>
0040C2C5 FF45 88 inc dword ptr [ebp-78]
0040C2C8 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C2CE 66:C785 7CFFFFF>mov word ptr [ebp-84], 0B0
0040C2D7 6A 15 push 15
0040C2D9 6A 00 push 0
0040C2DB 52 push edx
0040C2DC E8 C3641200 call <_memset>
0040C2E1 8B8B 9C080000 mov ecx, dword ptr [ebx+89C]
0040C2E7 83C4 0C add esp, 0C
0040C2EA 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C2F0 8B01 mov eax, dword ptr [ecx]
0040C2F2 50 push eax
0040C2F3 68 A7F55500 push 0055F5A7 ; %d
0040C2F8 52 push edx
0040C2F9 E8 FE9B1200 call <_sprintf>
0040C2FE 83C4 0C add esp, 0C
0040C301 33D2 xor edx, edx
0040C303 8D85 58FBFFFF lea eax, dword ptr [ebp-4A8]
0040C309 > 8038 00 cmp byte ptr [eax], 0 ; 注意eax字串就是上面的EDX值转换过来的
0040C30C > 75 03 jnz short <loc_40C311>
0040C30E C600 28 mov byte ptr [eax], 28
0040C311 > 42 inc edx
0040C312 40 inc eax
0040C313 83FA 06 cmp edx, 6
0040C316 ^ 7C F1 jl short <loc_40C309>
0040C318 8D83 28150000 lea eax, dword ptr [ebx+1528] ; 查看EAX 上面的字串后面加一个的（
0040C31E E8 895DFFFF call <sub_4020AC>
0040C323 66:C785 7CFFFFF>mov word ptr [ebp-84], 0BC
0040C32C 8BF0 mov esi, eax
0040C32E 8D45 AC lea eax, dword ptr [ebp-54]
0040C331 53 push ebx
0040C332 E8 2156FFFF call <unknown_libname_55>
0040C337 50 push eax
0040C338 FF45 88 inc dword ptr [ebp-78]
0040C33B E8 C01D0100 call <stru_574100>
0040C340 > 83C4 08 add esp, 8
0040C343 8D55 AC lea edx, dword ptr [ebp-54]
0040C346 8D45 B0 lea eax, dword ptr [ebp-50]
0040C349 E8 724F1300 call <sub_5412C0>
0040C34E FF4D 88 dec dword ptr [ebp-78]
0040C351 8D45 AC lea eax, dword ptr [ebp-54]
0040C354 BA 02000000 mov edx, 2
0040C359 E8 324F1300 call <sub_541290>
0040C35E 8D45 B0 lea eax, dword ptr [ebp-50]
0040C361 E8 465DFFFF call <sub_4020AC>
0040C366 8BC8 mov ecx, eax
0040C368 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C36E 85C0 test eax, eax
0040C370 79 05 jns short <loc_40C377>
0040C372 05 FF030000 add eax, 3FF
0040C377 > C1F8 0A sar eax, 0A
0040C37A BF 03000000 mov edi, 3
0040C37F 99 cdq
0040C380 > F7FF idiv edi
0040C382 8995 68FFFFFF mov dword ptr [ebp-98], edx
0040C388 8B85 68FFFFFF mov eax, dword ptr [ebp-98]
0040C38E 0FBE1401 movsx edx, byte ptr [ecx+eax] ; 随机取机器码的第一位或第二位或第三位
0040C392 81E2 01000080 and edx, 80000001 ; 假如取第一位2(32),用 32 and 1 = 0 自已可能试下其它的两位如果edx=0,1是什么结果
0040C398 79 05 jns short <loc_40C39F>
0040C39A 4A dec edx
0040C39B 83CA FE or edx, FFFFFFFE
0040C39E 42 inc edx
0040C39F > 85D2 test edx, edx ; edx=0 就不跳
0040C3A1 0F85 82000000 jnz <loc_40C429> ;
0040C3A7 66:C785 7CFFFFF>mov word ptr [ebp-84], 0C8
0040C3B0 BA AAF55500 mov edx, 0055F5AA
0040C3B5 8D45 A8 lea eax, dword ptr [ebp-58]
0040C3B8 E8 274C1300 call <sub_540FE4>
0040C3BD FF45 88 inc dword ptr [ebp-78]
0040C3C0 8D55 A8 lea edx, dword ptr [ebp-58]
0040C3C3 8DBB 24150000 lea edi, dword ptr [ebx+1524]
0040C3C9 8BC7 mov eax, edi
0040C3CB E8 BC4F1300 call <@System@AnsiString@$bneq$>
0040C3D0 84C0 test al, al
0040C3D2 74 20 je short <loc_40C3F4>
0040C3D4 8B95 68FFFFFF mov edx, dword ptr [ebp-98]
0040C3DA 8B85 68FFFFFF mov eax, dword ptr [ebp-98]
0040C3E0 0FBE4C56 06 movsx ecx, byte ptr [esi+edx*2+6>; 内存中查看 上篇提到的40位注册码转换而成的20位字串的第七位
0040C3E5 0FBE9445 58FBFF>movsx edx, byte ptr [ebp+eax*2-4>; 内存中查看 上面提到的字串edx=0 就取字串的第一位
0040C3ED 83C1 E7 add ecx, -19
0040C3F0 3BCA cmp ecx, edx
0040C3F2 75 04 jnz short <stru_5623F8> ; 关键的比较一
0040C3F4 > 33C9 xor ecx, ecx
0040C3F6 EB 05 jmp short <loc_40C3FD>
0040C3F8 > B9 01000000 mov ecx, 1
0040C3FD > 51 push ecx
0040C3FE FF4D 88 dec dword ptr [ebp-78]
0040C401 8D45 A8 lea eax, dword ptr [ebp-58]
0040C404 BA 02000000 mov edx, 2
0040C409 E8 824E1300 call <sub_541290>
0040C40E 59 pop ecx
0040C40F 84C9 test cl, cl
0040C411 0F84 D8000000 je <loc_40C4EF>
0040C417 8D93 28150000 lea edx, dword ptr [ebx+1528]
0040C41D 8BC7 mov eax, edi
0040C41F E8 9C4E1300 call <sub_5412C0>
0040C424 E9 C6000000 jmp <loc_40C4EF>
0040C429 > 66:C785 7CFFFFF>mov word ptr [ebp-84], 0D4
0040C432 BA ABF55500 mov edx, 0055F5AB
0040C437 8D45 A4 lea eax, dword ptr [ebp-5C]
0040C43A E8 A54B1300 call <sub_540FE4>
0040C43F FF45 88 inc dword ptr [ebp-78]
0040C442 8D55 A4 lea edx, dword ptr [ebp-5C]
0040C445 8DBB 24150000 lea edi, dword ptr [ebx+1524]
0040C44B 8BC7 mov eax, edi
0040C44D E8 3A4F1300 call <@System@AnsiString@$bneq$>
0040C452 84C0 test al, al
0040C454 > 74 20 je short <loc_40C476>
0040C456 8B95 68FFFFFF mov edx, dword ptr [ebp-98]
0040C45C 8B85 68FFFFFF mov eax, dword ptr [ebp-98]
0040C462 0FBE4C56 06 movsx ecx, byte ptr [esi+edx*2+6>; 内存中查看 上篇提到的40位注册码转换而成的20位字串的第11位
0040C467 0FBE9445 59FBFF>movsx edx, byte ptr [ebp+eax*2-4>; 内存中查看 上面提到的字串的第6位
0040C46F 83C2 19 add edx, 19
0040C472 3BCA cmp ecx, edx
0040C474 75 04 jnz short <loc_40C47A> ; 关键的比较二
0040C476 > 33C9 xor ecx, ecx
0040C478 EB 05 jmp short <loc_40C47F>
0040C47A > B9 01000000 mov ecx, 1
0040C47F > 51 push ecx
0040C480 > FF4D 88 dec dword ptr [ebp-78]
0040C483 8D45 A4 lea eax, dword ptr [ebp-5C]
0040C486 BA 02000000 mov edx, 2
0040C48B E8 004E1300 call <sub_541290>
0040C490 > 59 pop ecx
0040C491 84C9 test cl, cl
0040C493 74 5A je short <loc_40C4EF>
0040C495 66:C785 7CFFFFF>mov word ptr [ebp-84], 0E0
0040C49E 8D45 9C lea eax, dword ptr [ebp-64]
0040C4A1 E8 B254FFFF call <unknown_libname_55>
0040C4A6 50 push eax
0040C4A7 FF45 88 inc dword ptr [ebp-78]
0040C4AA BA ACF55500 mov edx, 0055F5AC ; 1
0040C4AF 8D45 A0 lea eax, dword ptr [ebp-60]
0040C4B2 E8 2D4B1300 call <sub_540FE4>
0040C4B7 FF45 88 inc dword ptr [ebp-78]
0040C4BA 8D55 A0 lea edx, dword ptr [ebp-60]
0040C4BD 8BC7 mov eax, edi
0040C4BF 59 pop ecx
0040C4C0 E8 234E1300 call <@System@AnsiString@$badd$>
0040C4C5 8D55 9C lea edx, dword ptr [ebp-64]
0040C4C8 8BC7 mov eax, edi
0040C4CA E8 F14D1300 call <sub_5412C0>
0040C4CF FF4D 88 dec dword ptr [ebp-78]
0040C4D2 8D45 9C lea eax, dword ptr [ebp-64]
0040C4D5 BA 02000000 mov edx, 2
0040C4DA E8 B14D1300 call <sub_541290>
0040C4DF FF4D 88 dec dword ptr [ebp-78]
0040C4E2 8D45 A0 lea eax, dword ptr [ebp-60]
0040C4E5 BA 02000000 mov edx, 2
0040C4EA E8 A14D1300 call <sub_541290>
0040C4EF > FF4D 88 dec dword ptr [ebp-78]
0040C4F2 8D45 B0 lea eax, dword ptr [ebp-50]
0040C4F5 BA 02000000 mov edx, 2
0040C4FA E8 914D1300 call <sub_541290>
0040C4FF 66:C785 7CFFFFF>mov word ptr [ebp-84], 14
0040C508 > B2 01 mov dl, 1
0040C50A A1 DC8F5100 mov eax, dword ptr [<off_518FD>
0040C50F E8 9C77FFFF call <sub_403CB0>
0040C514 8983 78130000 mov dword ptr [ebx+1378], eax
0040C51A B9 28000000 mov ecx, 28
0040C51F 8B55 0C mov edx, dword ptr [ebp+C]
0040C522 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C528 8B30 mov esi, dword ptr [eax]
0040C52A FF56 08 call dword ptr [esi+8]
0040C52D 8D83 1C150000 lea eax, dword ptr [ebx+151C]
0040C533 E8 745BFFFF call <sub_4020AC>
0040C538 8BF8 mov edi, eax
0040C53A 33C0 xor eax, eax
0040C53C 83C9 FF or ecx, FFFFFFFF
0040C53F 8DB5 58FBFFFF lea esi, dword ptr [ebp-4A8]
0040C545 F2:AE repne scas byte ptr es:[edi]
0040C547 F7D1 not ecx
0040C549 2BF9 sub edi, ecx
0040C54B 8BD1 mov edx, ecx
0040C54D 87F7 xchg edi, esi
0040C54F C1E9 02 shr ecx, 2
0040C552 8BC7 mov eax, edi
0040C554 F3:A5 rep movs dword ptr es:[edi], d>
0040C556 8BCA mov ecx, edx
0040C558 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C55E 83E1 03 and ecx, 3
0040C561 F3:A4 rep movs byte ptr es:[edi], by>
0040C563 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C569 B9 14000000 mov ecx, 14
0040C56E 8B30 mov esi, dword ptr [eax]
0040C570 FF56 08 call dword ptr [esi+8]
0040C573 8D83 24150000 lea eax, dword ptr [ebx+1524]
0040C579 E8 2E5BFFFF call <sub_4020AC>
0040C57E 8BF8 mov edi, eax
0040C580 33C0 xor eax, eax
0040C582 83C9 FF or ecx, FFFFFFFF
0040C585 8DB5 58FBFFFF lea esi, dword ptr [ebp-4A8]
0040C58B F2:AE repne scas byte ptr es:[edi]
0040C58D F7D1 not ecx
0040C58F 2BF9 sub edi, ecx
0040C591 8BD1 mov edx, ecx
0040C593 87F7 xchg edi, esi
0040C595 C1E9 02 shr ecx, 2
0040C598 > 8BC7 mov eax, edi
0040C59A F3:A5 rep movs dword ptr es:[edi], d>
0040C59C 8BCA mov ecx, edx
0040C59E 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C5A4 83E1 03 and ecx, 3
0040C5A7 F3:A4 rep movs byte ptr es:[edi], by>
0040C5A9 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C5AF B9 14000000 mov ecx, 14
0040C5B4 > 8B30 mov esi, dword ptr [eax]
0040C5B6 FF56 08 call dword ptr [esi+8]
0040C5B9 8B83 B4050000 mov eax, dword ptr [ebx+5B4]
0040C5BF 8B10 mov edx, dword ptr [eax]
0040C5C1 FF92 B4000000 call dword ptr [edx+B4]
0040C5C7 3C 01 cmp al, 1
0040C5C9 75 32 jnz short <loc_40C5FD>
0040C5CB 8D83 E0140000 lea eax, dword ptr [ebx+14E0]
0040C5D1 E8 D65AFFFF call <sub_4020AC>
0040C5D6 8BF8 mov edi, eax
0040C5D8 33C0 xor eax, eax
0040C5DA 83C9 FF or ecx, FFFFFFFF
0040C5DD 8DB5 58FBFFFF lea esi, dword ptr [ebp-4A8]
0040C5E3 F2:AE repne scas byte ptr es:[edi]
0040C5E5 F7D1 not ecx
0040C5E7 2BF9 sub edi, ecx
0040C5E9 8BD1 mov edx, ecx
0040C5EB 87F7 xchg edi, esi
0040C5ED C1E9 02 shr ecx, 2
0040C5F0 8BC7 mov eax, edi
0040C5F2 F3:A5 rep movs dword ptr es:[edi], d>
0040C5F4 > 8BCA mov ecx, edx
0040C5F6 83E1 03 and ecx, 3
0040C5F9 F3:A4 rep movs byte ptr es:[edi], by>
0040C5FB EB 07 jmp short <off_562604>
0040C5FD > C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 0
0040C604 > 8D85 58FBFFFF lea eax, dword ptr [ebp-4A8]
0040C60A 50 push eax
0040C60B E8 348F0800 call <sub_495544>
0040C610 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C616 59 pop ecx
0040C617 B9 28000000 mov ecx, 28
0040C61C 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C622 8B30 mov esi, dword ptr [eax]
0040C624 > FF56 08 call dword ptr [esi+8]
0040C627 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C62D 8D93 D8140000 lea edx, dword ptr [ebx+14D8]
0040C633 B9 04000000 mov ecx, 4
0040C638 8B30 mov esi, dword ptr [eax]
0040C63A FF56 08 call dword ptr [esi+8]
0040C63D 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C643 8D93 DC140000 lea edx, dword ptr [ebx+14DC]
0040C649 B9 04000000 mov ecx, 4
0040C64E 8B30 mov esi, dword ptr [eax]
0040C650 FF56 08 call dword ptr [esi+8]
0040C653 A1 F8D65900 mov eax, dword ptr [59D6F8]
0040C658 8B10 mov edx, dword ptr [eax]
0040C65A 8B8A F8020000 mov ecx, dword ptr [edx+2F8]
0040C660 8B41 58 mov eax, dword ptr [ecx+58]
0040C663 E8 30D30C00 call <@Graphics@TFont@GetSize$q>
0040C668 8985 68FFFFFF mov dword ptr [ebp-98], eax
0040C66E 8D95 68FFFFFF lea edx, dword ptr [ebp-98]
0040C674 > B9 04000000 mov ecx, 4
0040C679 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C67F 8B30 mov esi, dword ptr [eax]
0040C681 FF56 08 call dword ptr [esi+8]
0040C684 > 66:C785 7CFFFFF>mov word ptr [ebp-84], 0EC
0040C68D 8D45 98 lea eax, dword ptr [ebp-68]
0040C690 E8 C352FFFF call <unknown_libname_55>
0040C695 FF45 88 inc dword ptr [ebp-78]
0040C698 8B0D F8D65900 mov ecx, dword ptr [59D6F8] ; 屏录专家._InfoForm
0040C69E 8BD0 mov edx, eax
0040C6A0 8B01 mov eax, dword ptr [ecx]
0040C6A2 8B88 F8020000 mov ecx, dword ptr [eax+2F8]
0040C6A8 8B41 58 mov eax, dword ptr [ecx+58]
0040C6AB E8 74D20C00 call <@Graphics@TFont@GetName$q>
0040C6B0 8D45 98 lea eax, dword ptr [ebp-68]
0040C6B3 E8 F459FFFF call <sub_4020AC>
0040C6B8 8BF8 mov edi, eax
0040C6BA 33C0 xor eax, eax
0040C6BC 83C9 FF or ecx, FFFFFFFF
0040C6BF 8DB5 58FBFFFF lea esi, dword ptr [ebp-4A8]
0040C6C5 F2:AE repne scas byte ptr es:[edi]
0040C6C7 F7D1 not ecx
0040C6C9 2BF9 sub edi, ecx
0040C6CB 8BD1 mov edx, ecx
0040C6CD 87F7 xchg edi, esi
0040C6CF C1E9 02 shr ecx, 2
0040C6D2 8BC7 mov eax, edi
0040C6D4 F3:A5 rep movs dword ptr es:[edi], d>
0040C6D6 8BCA mov ecx, edx
0040C6D8 BA 02000000 mov edx, 2
0040C6DD 83E1 03 and ecx, 3
0040C6E0 > 8D45 98 lea eax, dword ptr [ebp-68]
0040C6E3 F3:A4 rep movs byte ptr es:[edi], by>
0040C6E5 FF4D 88 dec dword ptr [ebp-78]
0040C6E8 E8 A34B1300 call <sub_541290>
0040C6ED 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C6F3 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C6F9 B9 14000000 mov ecx, 14
0040C6FE 8B30 mov esi, dword ptr [eax]
0040C700 FF56 08 call dword ptr [esi+8]
0040C703 53 push ebx
0040C704 E8 CF57FFFF call <sub_401ED8>
0040C709 59 pop ecx
0040C70A A1 F8D65900 mov eax, dword ptr [59D6F8]
0040C70F 8B10 mov edx, dword ptr [eax]
0040C711 8B8A F8020000 mov ecx, dword ptr [edx+2F8]
0040C717 8B41 58 mov eax, dword ptr [ecx+58]
0040C71A 8B50 18 mov edx, dword ptr [eax+18]
0040C71D 8995 68FFFFFF mov dword ptr [ebp-98], edx
0040C723 8D95 68FFFFFF lea edx, dword ptr [ebp-98]
0040C729 B9 04000000 mov ecx, 4
0040C72E 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C734 8B30 mov esi, dword ptr [eax]
0040C736 FF56 08 call dword ptr [esi+8]
0040C739 A1 F8D65900 mov eax, dword ptr [59D6F8]
0040C73E 8B10 mov edx, dword ptr [eax]
0040C740 8B8A F8020000 mov ecx, dword ptr [edx+2F8]
0040C746 8B41 58 mov eax, dword ptr [ecx+58]
0040C749 E8 86D20C00 call <@Graphics@TFont@GetStyle$>
0040C74E 8885 5BFFFFFF mov byte ptr [ebp-A5], al
0040C754 8D85 5BFFFFFF lea eax, dword ptr [ebp-A5]
0040C75A 33D2 xor edx, edx
0040C75C > E8 BBB80000 call <sub_41801C>
0040C761 3C 01 cmp al, 1
0040C763 75 09 jnz short <loc_40C76E>
0040C765 C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 1
0040C76C > EB 07 jmp short <loc_40C775>
0040C76E > C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 0
0040C775 > 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C77B 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C781 B9 01000000 mov ecx, 1
0040C786 8B30 mov esi, dword ptr [eax]
0040C788 > FF56 08 call dword ptr [esi+8]
0040C78B A1 F8D65900 mov eax, dword ptr [59D6F8]
0040C790 8B10 mov edx, dword ptr [eax]
0040C792 8B8A F8020000 mov ecx, dword ptr [edx+2F8]
0040C798 > 8B41 58 mov eax, dword ptr [ecx+58]
0040C79B E8 34D20C00 call <@Graphics@TFont@GetStyle$>
0040C7A0 8885 5AFFFFFF mov byte ptr [ebp-A6], al
0040C7A6 8D85 5AFFFFFF lea eax, dword ptr [ebp-A6]
0040C7AC B2 01 mov dl, 1
0040C7AE E8 69B80000 call <sub_41801C>
0040C7B3 3C 01 cmp al, 1
0040C7B5 75 09 jnz short <loc_40C7C0>
0040C7B7 C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 1
0040C7BE EB 07 jmp short <loc_40C7C7>
0040C7C0 > C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 0
0040C7C7 > 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C7CD 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C7D3 B9 01000000 mov ecx, 1
0040C7D8 > 8B30 mov esi, dword ptr [eax]
0040C7DA FF56 08 call dword ptr [esi+8]
0040C7DD A1 F8D65900 mov eax, dword ptr [59D6F8]
0040C7E2 8B10 mov edx, dword ptr [eax]
0040C7E4 8B8A F8020000 mov ecx, dword ptr [edx+2F8]
0040C7EA 8B41 58 mov eax, dword ptr [ecx+58]
0040C7ED E8 E2D10C00 call <@Graphics@TFont@GetStyle$>
0040C7F2 8885 59FFFFFF mov byte ptr [ebp-A7], al
0040C7F8 8D85 59FFFFFF lea eax, dword ptr [ebp-A7]
0040C7FE B2 02 mov dl, 2
0040C800 E8 17B80000 call <sub_41801C>
0040C805 3C 01 cmp al, 1
0040C807 75 09 jnz short <loc_40C812>
0040C809 C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 1
0040C810 EB 07 jmp short <loc_40C819>
0040C812 > C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 0
0040C819 > 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C81F 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C825 B9 01000000 mov ecx, 1
0040C82A 8B30 mov esi, dword ptr [eax]
0040C82C FF56 08 call dword ptr [esi+8]
0040C82F A1 F8D65900 mov eax, dword ptr [59D6F8]
0040C834 8B10 mov edx, dword ptr [eax]
0040C836 8B8A F8020000 mov ecx, dword ptr [edx+2F8]
0040C83C > 8B41 58 mov eax, dword ptr [ecx+58]
0040C83F E8 90D10C00 call <@Graphics@TFont@GetStyle$>
0040C844 8885 58FFFFFF mov byte ptr [ebp-A8], al
0040C84A 8D85 58FFFFFF lea eax, dword ptr [ebp-A8]
0040C850 B2 03 mov dl, 3
0040C852 E8 C5B70000 call <sub_41801C>
0040C857 3C 01 cmp al, 1
0040C859 75 09 jnz short <loc_40C864>
0040C85B C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 1
0040C862 EB 07 jmp short <loc_40C86B>
0040C864 > C685 58FBFFFF 0>mov byte ptr [ebp-4A8], 0
0040C86B > 8B83 74130000 mov eax, dword ptr [ebx+1374]
0040C871 8D95 58FBFFFF lea edx, dword ptr [ebp-4A8]
0040C877 B9 01000000 mov ecx, 1
0040C87C 8B30 mov esi, dword ptr [eax]
0040C87E FF56 08 call dword ptr [esi+8]
0040C881 B2 01 mov dl, 1
0040C883 A1 308D5100 mov eax, dword ptr [<off_518D3>; 揣Q
0040C888 > E8 2FE5FFFF call <sub_40ADBC>
0040C88D 8983 340F0000 mov dword ptr [ebx+F34], eax
0040C893 B2 01 mov dl, 1
0040C895 A1 308D5100 mov eax, dword ptr [<off_518D3>; 揣Q
0040C89A E8 1DE5FFFF call <sub_40ADBC>
0040C89F 8983 300F0000 mov dword ptr [ebx+F30], eax
0040C8A5 83BB 9C0D0000 0>cmp dword ptr [ebx+D9C], 0
0040C8AC 7E 39 jle short <loc_40C8E7>
0040C8AE 8BB3 3C1A0000 mov esi, dword ptr [ebx+1A3C]
0040C8B4 8975 90 mov dword ptr [ebp-70], esi
0040C8B7 85F6 test esi, esi
0040C8B9 74 24 je short <loc_40C8DF>
0040C8BB 8B06 mov eax, dword ptr [esi]
0040C8BD 8945 94 mov dword ptr [ebp-6C], eax
0040C8C0 66:C785 7CFFFFF>mov word ptr [ebp-84], 104
0040C8C9 BA 03000000 mov edx, 3
0040C8CE 8B45 90 mov eax, dword ptr [ebp-70]
0040C8D1 8B08 mov ecx, dword ptr [eax]
0040C8D3 FF51 FC call dword ptr [ecx-4]
0040C8D6 66:C785 7CFFFFF>mov word ptr [ebp-84], 0F8
0040C8DF > 33D2 xor edx, edx
0040C8E1 8993 3C1A0000 mov dword ptr [ebx+1A3C], edx
0040C8E7 > B0 01 mov al, 1
0040C8E9 BA 02000000 mov edx, 2
0040C8EE 50 push eax
0040C8EF 8D45 F8 lea eax, dword ptr [ebp-8]
0040C8F2 FF4D 88 dec dword ptr [ebp-78]
0040C8F5 E8 96491300 call <sub_541290>
0040C8FA FF4D 88 dec dword ptr [ebp-78]
0040C8FD 8D45 FC lea eax, dword ptr [ebp-4]
0040C900 BA 02000000 mov edx, 2
0040C905 E8 86491300 call <sub_541290>
0040C90A 58 pop eax
0040C90B 8B95 6CFFFFFF mov edx, dword ptr [ebp-94]
0040C911 64:8915 0000000>mov dword ptr fs:[0], edx
0040C918 > 5F pop edi
0040C919 5E pop esi
0040C91A 5B pop ebx
0040C91B 8BE5 mov esp, ebp
0040C91D 5D pop ebp
0040C91E C3 retn
0040C91F 001F add byte ptr [edi], bl
0040C921 85EB test ebx, ebp
0040C923 51 push ecx
0040C924 B8 1E094096 mov eax, 9640091E
0040C929 E8 7A211A40 call 405AEAA8
0040C92E 51 push ecx
0040C92F A3 FC3F0000 mov dword ptr [3FFC], eax
0040C934 > 55 push ebp
0040C935 8BEC mov ebp, esp
0040C937 83C4 D8 add esp, -28
0040C93A 53 push ebx
0040C93B 56 push esi
0040C93C 8B75 10 mov esi, dword ptr [ebp+10]
0040C93F 8B5D 08 mov ebx, dword ptr [ebp+8]
0040C942 B8 84E75600 mov eax, 0056E784
0040C947 E8 8C621200 call <@__InitExceptBlockLDTC>
0040C94C 83BB 48030000 0>cmp dword ptr [ebx+348], 0
0040C953 75 11 jnz short <loc_40C966>
0040C955 8B55 D8 mov edx, dword ptr [ebp-28]
0040C958 64:8915 0000000>mov dword ptr fs:[0], edx
0040C95F 8BC2 mov eax, edx
0040C961 E9 EC000000 jmp <loc_40CA52>
0040C966 > 83BB 48030000 0>cmp dword ptr [ebx+348], 1
0040C96D 0F85 86000000 jnz <loc_40C9F9>
0040C973 8B83 18030000 mov eax, dword ptr [ebx+318]
0040C979 E8 EE070C00 call <@Stdctrls@TCustomComboBox>
0040C97E 85C0 test eax, eax
0040C980 75 0B jnz short <loc_40C98D>
0040C982 8B16 mov edx, dword ptr [esi]
0040C984 03D2 add edx, edx
0040C986 8916 mov dword ptr [esi], edx
0040C988 E9 BC000000 jmp <loc_40CA49>
0040C98D > 8B83 18030000 mov eax, dword ptr [ebx+318]
0040C993 E8 D4070C00 call <@Stdctrls@TCustomComboBox>
0040C998 48 dec eax
0040C999 75 0C jnz short <loc_40C9A7>
0040C99B 8B16 mov edx, dword ptr [esi]
0040C99D 8D1452 lea edx, dword ptr [edx+edx*2]
0040C9A0 8916 mov dword ptr [esi], edx
0040C9A2 E9 A2000000 jmp <loc_40CA49>
0040C9A7 > 8B83 18030000 mov eax, dword ptr [ebx+318]
0040C9AD E8 BA070C00 call <@Stdctrls@TCustomComboBox>
0040C9B2 83F8 02 cmp eax, 2
0040C9B5 75 0C jnz short <loc_40C9C3>
0040C9B7 8B16 mov edx, dword ptr [esi]
0040C9B9 C1E2 02 shl edx, 2
0040C9BC 8916 mov dword ptr [esi], edx
0040C9BE E9 86000000 jmp <loc_40CA49>
0040C9C3 > 8B83 18030000 mov eax, dword ptr [ebx+318]
0040C9C9 E8 9E070C00 call <@Stdctrls@TCustomComboBox>
0040C9CE 83F8 03 cmp eax, 3
0040C9D1 75 09 jnz short <loc_40C9DC>
0040C9D3 8B16 mov edx, dword ptr [esi]
0040C9D5 8D1492 lea edx, dword ptr [edx+edx*4]
0040C9D8 8916 mov dword ptr [esi], edx
0040C9DA EB 6D jmp short <loc_40CA49>
0040C9DC > 8B83 18030000 mov eax, dword ptr [ebx+318]
0040C9E2 E8 85070C00 call <@Stdctrls@TCustomComboBox>
0040C9E7 83F8 04 cmp eax, 4
0040C9EA 75 5D jnz short <loc_40CA49>
0040C9EC 8B16 mov edx, dword ptr [esi]
0040C9EE 8BCA mov ecx, edx
0040C9F0 C1E2 03 shl edx, 3
0040C9F3 2BD1 sub edx, ecx
0040C9F5 8916 mov dword ptr [esi], edx
0040C9F7 EB 50 jmp short <loc_40CA49>
0040C9F9 > 83BB 48030000 0>cmp dword ptr [ebx+348], 2
0040CA00 75 47 jnz short <loc_40CA49>
0040CA02 66:C745 E8 0800 mov word ptr [ebp-18], 8
0040CA08 8D45 FC lea eax, dword ptr [ebp-4]
0040CA0B E8 484FFFFF call <unknown_libname_55>
0040CA10 8BD0 mov edx, eax
0040CA12 FF45 F4 inc dword ptr [ebp-C]
0040CA15 8B83 08030000 mov eax, dword ptr [ebx+308]
0040CA1B E8 B4060F00 call <@TControl@GetText$qqrv>
0040CA20 8D45 FC lea eax, dword ptr [ebp-4]
0040CA23 E8 784B1300 call <@System@AnsiString@ToInt$>
0040CA28 50 push eax
0040CA29 8B55 0C mov edx, dword ptr [ebp+C]
0040CA2C 8B42 04 mov eax, dword ptr [edx+4]
0040CA2F F72E imul dword ptr [esi]
0040CA31 5A pop edx
0040CA32 8BCA mov ecx, edx
0040CA34 99 cdq
0040CA35 F7F9 idiv ecx
0040CA37 8906 mov dword ptr [esi], eax
0040CA39 FF4D F4 dec dword ptr [ebp-C]
0040CA3C 8D45 FC lea eax, dword ptr [ebp-4]
0040CA3F BA 02000000 mov edx, 2
0040CA44 E8 47481300 call <sub_541290>
0040CA49 > 8B45 D8 mov eax, dword ptr [ebp-28]
0040CA4C 64:A3 00000000 mov dword ptr fs:[0], eax
0040CA52 > 5E pop esi
0040CA53 5B pop ebx
0040CA54 8BE5 mov esp, ebp
0040CA56 5D pop ebp
0040CA57 C3 retn
0040CA58 > 55 push ebp
0040CA59 8BEC mov ebp, esp
0040CA5B 81C4 B0F3FFFF add esp, -0C50
0040CA61 53 push ebx
0040CA62 56 push esi
0040CA63 57 push edi
0040CA64 8B7D 0C mov edi, dword ptr [ebp+C]
0040CA67 8B75 08 mov esi, dword ptr [ebp+8]
0040CA6A B8 F4E75600 mov eax, 0056E7F4
0040CA6F E8 64611200 call <@__InitExceptBlockLDTC>
0040CA74 66:C745 DC 0800 mov word ptr [ebp-24], 8
0040CA7A 8D45 FC lea eax, dword ptr [ebp-4]
0040CA7D E8 D64EFFFF call <unknown_libname_55>
0040CA82 FF45 E8 inc dword ptr [ebp-18]
0040CA85 66:C745 DC 1400 mov word ptr [ebp-24], 14
0040CA8B 66:C745 DC 2000 mov word ptr [ebp-24], 20
0040CA91 8D45 F8 lea eax, dword ptr [ebp-8]
0040CA94 E8 BF4EFFFF call <unknown_libname_55>
0040CA99 FF45 E8 inc dword ptr [ebp-18]
0040CA9C 33D2 xor edx, edx
0040CA9E 66:C745 DC 1400 mov word ptr [ebp-24], 14
0040CAA4 8955 C4 mov dword ptr [ebp-3C], edx
0040CAA7 33C9 xor ecx, ecx
0040CAA9 894D B0 mov dword ptr [ebp-50], ecx
0040CAAC 8B86 3C1A0000 mov eax, dword ptr [esi+1A3C]
0040CAB2 E8 7D250D00 call <@Graphics@TBitmap@GetPixe>
0040CAB7 3C 03 cmp al, 3
0040CAB9 75 33 jnz short <loc_40CAEE>
0040CABB 33C0 xor eax, eax
0040CABD BA 02000000 mov edx, 2
0040CAC2 50 push eax
0040CAC3 8D45 F8 lea eax, dword ptr [ebp-8]
0040CAC6 FF4D E8 dec dword ptr [ebp-18]
0040CAC9 E8 C2471300 call <sub_541290>
0040CACE FF4D E8 dec dword ptr [ebp-18]
0040CAD1 8D45 FC lea eax, dword ptr [ebp-4]
0040CAD4 BA 02000000 mov edx, 2
0040CAD9 E8 B2471300 call <sub_541290>
0040CADE 58 pop eax
0040CADF 8B55 CC mov edx, dword ptr [ebp-34]
0040CAE2 64:8915 0000000>mov dword ptr fs:[0], edx
0040CAE9 E9 F8030000 jmp <loc_40CEE6>
0040CAEE > 8B86 3C1A0000 mov eax, dword ptr [esi+1A3C]
0040CAF4 E8 3B250D00 call <@Graphics@TBitmap@GetPixe>
0040CAF9 3C 05 cmp al, 5
0040CAFB 75 0C jnz short <loc_40CB09>
0040CAFD C786 641A0000 1>mov dword ptr [esi+1A64], 10
0040CB07 EB 34 jmp short <loc_40CB3D>
0040CB09 > 8B86 3C1A0000 mov eax, dword ptr [esi+1A3C]
0040CB0F E8 20250D00 call <@Graphics@TBitmap@GetPixe>
0040CB14 3C 06 cmp al, 6
0040CB16 75 0C jnz short <loc_40CB24>
0040CB18 C786 641A0000 1>mov dword ptr [esi+1A64], 18
0040CB22 EB 19 jmp short <loc_40CB3D>
0040CB24 > 8B86 3C1A0000 mov eax, dword ptr [esi+1A3C]
0040CB2A E8 05250D00 call <@Graphics@TBitmap@GetPixe>
0040CB2F 3C 07 cmp al, 7
0040CB31 75 0A jnz short <loc_40CB3D>
0040CB33 C786 641A0000 2>mov dword ptr [esi+1A64], 20
0040CB3D > 8B15 88D75900 mov edx, dword ptr [59D788] ; 屏录专家._DWmvForm
0040CB43 8B0A mov ecx, dword ptr [edx]
0040CB45 8B81 38030000 mov eax, dword ptr [ecx+338]
0040CB4B 8B10 mov edx, dword ptr [eax]
0040CB4D FF92 B4000000 call dword ptr [edx+B4]
0040CB53 33C9 xor ecx, ecx
0040CB55 8AC8 mov cl, al
0040CB57 894D B0 mov dword ptr [ebp-50], ecx
0040CB5A 8B86 84030000 mov eax, dword ptr [esi+384]
0040CB60 8B10 mov edx, dword ptr [eax]
0040CB62 FF92 B4000000 call dword ptr [edx+B4]
0040CB68 33C9 xor ecx, ecx
0040CB6A 8AC8 mov cl, al
0040CB6C A1 88D75900 mov eax, dword ptr [59D788]
0040CB71 894D C4 mov dword ptr [ebp-3C], ecx
0040CB74 8B10 mov edx, dword ptr [eax]
0040CB76 52 push edx
0040CB77 E8 D08D0400 call <sub_45594C>
0040CB7C 59 pop ecx
0040CB7D 8945 C0 mov dword ptr [ebp-40], eax
0040CB80 57 push edi
0040CB81 8B0D 88D75900 mov ecx, dword ptr [59D788] ; 屏录专家._DWmvForm
0040CB87 8B01 mov eax, dword ptr [ecx]
0040CB89 50 push eax
0040CB8A E8 D58D0400 call <sub_455964>
0040CB8F 83C4 08 add esp, 8
0040CB92 8945 BC mov dword ptr [ebp-44], eax
0040CB95 8D55 B4 lea edx, dword ptr [ebp-4C]
0040CB98 A1 88D75900 mov eax, dword ptr [59D788]
0040CB9D 52 push edx
0040CB9E 8D4D B8 lea ecx, dword ptr [ebp-48]
0040CBA1 51 push ecx
0040CBA2 57 push edi
0040CBA3 8B10 mov edx, dword ptr [eax]
0040CBA5 52 push edx
0040CBA6 E8 B18E0400 call <sub_455A5C>
0040CBAB 83C4 10 add esp, 10
0040CBAE 8D8E 701A0000 lea ecx, dword ptr [esi+1A70]
0040CBB4 6A 28 push 28
0040CBB6 57 push edi
0040CBB7 51 push ecx
0040CBB8 E8 775B1200 call <_memcpy>
0040CBBD 83C4 0C add esp, 0C
0040CBC0 66:C745 DC 2C00 mov word ptr [ebp-24], 2C
0040CBC6 6A 00 push 0
0040CBC8 6A 00 push 0
0040CBCA 6A 00 push 0
0040CBCC 56 push esi
0040CBCD 8D45 F4 lea eax, dword ptr [ebp-C]
0040CBD0 E8 834DFFFF call <unknown_libname_55>
0040CBD5 50 push eax
0040CBD6 FF45 E8 inc dword ptr [ebp-18]
0040CBD9 E8 32E2FFFF call <sub_40AE10>
0040CBDE 83C4 14 add esp, 14
0040CBE1 8D55 F4 lea edx, dword ptr [ebp-C]
0040CBE4 8D45 FC lea eax, dword ptr [ebp-4]
0040CBE7 E8 D4461300 call <sub_5412C0>
0040CBEC FF4D E8 dec dword ptr [ebp-18]
0040CBEF 8D45 F4 lea eax, dword ptr [ebp-C]
0040CBF2 BA 02000000 mov edx, 2
0040CBF7 E8 94461300 call <sub_541290>
0040CBFC 8D55 FC lea edx, dword ptr [ebp-4]
0040CBFF 8D86 F40D0000 lea eax, dword ptr [esi+DF4]
0040CC05 E8 B6461300 call <sub_5412C0>
0040CC0A 33DB xor ebx, ebx
0040CC0C 8D45 FC lea eax, dword ptr [ebp-4]
0040CC0F E8 9854FFFF call <sub_4020AC>
0040CC14 50 push eax
0040CC15 E8 BE5C1200 call <_strlen>
0040CC1A 59 pop ecx
0040CC1B 8945 C8 mov dword ptr [ebp-38], eax
0040CC1E 6A 04 push 4
0040CC20 8D55 C8 lea edx, dword ptr [ebp-38]
0040CC23 52 push edx
0040CC24 8D8D B0F3FFFF lea ecx, dword ptr [ebp-C50]
0040CC2A 03CB add ecx, ebx
0040CC2C 51 push ecx
0040CC2D E8 025B1200 call <_memcpy>
0040CC32 83C4 0C add esp, 0C
0040CC35 83C3 04 add ebx, 4
0040CC38 8B45 C8 mov eax, dword ptr [ebp-38]
0040CC3B 50 push eax
0040CC3C 8D45 FC lea eax, dword ptr [ebp-4]
0040CC3F E8 6854FFFF call <sub_4020AC>
0040CC44 50 push eax
0040CC45 8D95 B0F3FFFF lea edx, dword ptr [ebp-C50]
0040CC4B 03D3 add edx, ebx
0040CC4D 52 push edx
0040CC4E E8 E15A1200 call <_memcpy>
0040CC53 83C4 0C add esp, 0C
0040CC56 8D8D B0F3FFFF lea ecx, dword ptr [ebp-C50]
0040CC5C 035D C8 add ebx, dword ptr [ebp-38]
0040CC5F 03CB add ecx, ebx
0040CC61 6A 28 push 28
0040CC63 57 push edi
0040CC64 51 push ecx
0040CC65 E8 CA5A1200 call <_memcpy>
0040CC6A 83C4 0C add esp, 0C
0040CC6D 83C3 28 add ebx, 28
0040CC70 8D45 C4 lea eax, dword ptr [ebp-3C]
0040CC73 8D95 B0F3FFFF lea edx, dword ptr [ebp-C50]
0040CC79 6A 04 push 4
0040CC7B 50 push eax
0040CC7C 03D3 add edx, ebx
0040CC7E 52 push edx
0040CC7F E8 B05A1200 call <_memcpy>
0040CC84 83C4 0C add esp, 0C
0040CC87 83C3 04 add ebx, 4
0040CC8A 837D C4 01 cmp dword ptr [ebp-3C], 1
0040CC8E 0F85 CA000000 jnz <loc_40CD5E>
0040CC94 8D8E DC150000 lea ecx, dword ptr [esi+15DC]
0040CC9A 51 push ecx
0040CC9B E8 385C1200 call <_strlen>
0040CCA0 59 pop ecx
0040CCA1 8945 C8 mov dword ptr [ebp-38], eax
0040CCA4 > 6A 04 push 4
0040CCA6 8D45 C8 lea eax, dword ptr [ebp-38]
0040CCA9 50 push eax
0040CCAA 8D95 B0F3FFFF lea edx, dword ptr [ebp-C50]
0040CCB0 03D3 add edx, ebx
0040CCB2 52 push edx
0040CCB3 E8 7C5A1200 call <_memcpy>
0040CCB8 83C4 0C add esp, 0C
0040CCBB 8B4D C8 mov ecx, dword ptr [ebp-38]
0040CCBE 83C3 04 add ebx, 4
0040CCC1 8D86 DC150000 lea eax, dword ptr [esi+15DC]
0040CCC7 51 push ecx
0040CCC8 8D95 B0F3FFFF lea edx, dword ptr [ebp-C50]
0040CCCE 03D3 add edx, ebx
0040CCD0 50 push eax
0040CCD1 52 push edx
0040CCD2 E8 5D5A1200 call <_memcpy>
0040CCD7 83C4 0C add esp, 0C
0040CCDA 8B8E 4C1A0000 mov ecx, dword ptr [esi+1A4C]
0040CCE0 035D C8 add ebx, dword ptr [ebp-38]
0040CCE3 8D96 DC150000 lea edx, dword ptr [esi+15DC]
0040CCE9 51 push ecx
0040CCEA 8B86 481A0000 mov eax, dword ptr [esi+1A48]
0040CCF0 50 push eax
0040CCF1 8D45 F0 lea eax, dword ptr [ebp-10]
0040CCF4 66:C745 DC 3800 mov word ptr [ebp-24], 38
0040CCFA E8 E5421300 call <sub_540FE4>
0040CCFF FF45 E8 inc dword ptr [ebp-18]
0040CD02 8B10 mov edx, dword ptr [eax]
0040CD04 52 push edx
0040CD05 E8 EE8C0800 call <sub_4959F8>
0040CD0A 83C4 0C add esp, 0C
0040CD0D 84C0 test al, al
0040CD0F 0F94C1 sete cl
0040CD12 83E1 01 and ecx, 1
0040CD15 8D45 F0 lea eax, dword ptr [ebp-10]
0040CD18 51 push ecx
0040CD19 BA 02000000 mov edx, 2
0040CD1E FF4D E8 dec dword ptr [ebp-18]
0040CD21 E8 6A451300 call <sub_541290>
0040CD26 59 pop ecx
0040CD27 84C9 test cl, cl
0040CD29 74 33 je short <loc_40CD5E>
0040CD2B 33C0 xor eax, eax
0040CD2D BA 02000000 mov edx, 2
0040CD32 50 push eax
0040CD33 8D45 F8 lea eax, dword ptr [ebp-8]
0040CD36 FF4D E8 dec dword ptr [ebp-18]
0040CD39 E8 52451300 call <sub_541290>
0040CD3E FF4D E8 dec dword ptr [ebp-18]
0040CD41 8D45 FC lea eax, dword ptr [ebp-4]
0040CD44 BA 02000000 mov edx, 2
0040CD49 E8 42451300 call <sub_541290>
0040CD4E 58 pop eax
0040CD4F 8B55 CC mov edx, dword ptr [ebp-34]
0040CD52 64:8915 0000000>mov dword ptr fs:[0], edx
0040CD59 E9 88010000 jmp <loc_40CEE6>
0040CD5E > 6A 04 push 4
0040CD60 8D4D C0 lea ecx, dword ptr [ebp-40]
0040CD63 51 push ecx
0040CD64 > 8D85 B0F3FFFF lea eax, dword ptr [ebp-C50]
0040CD6A 03C3 add eax, ebx
0040CD6C 50 push eax
0040CD6D E8 C2591200 call <_memcpy>
0040CD72 83C4 0C add esp, 0C
0040CD75 83C3 04 add ebx, 4
0040CD78 8D55 BC lea edx, dword ptr [ebp-44]
0040CD7B 8D8D B0F3FFFF lea ecx, dword ptr [ebp-C50]
0040CD81 6A 04 push 4
0040CD83 52 push edx
0040CD84 > 03CB add ecx, ebx
0040CD86 51 push ecx
0040CD87 E8 A8591200 call <_memcpy>
0040CD8C 83C4 0C add esp, 0C
0040CD8F 83C3 04 add ebx, 4
0040CD92 8D45 B8 lea eax, dword ptr [ebp-48]
0040CD95 8D95 B0F3FFFF lea edx, dword ptr [ebp-C50]
0040CD9B 6A 04 push 4
0040CD9D 50 push eax
0040CD9E 03D3 add edx, ebx
0040CDA0 52 push edx
0040CDA1 E8 8E591200 call <_memcpy>
0040CDA6 83C4 0C add esp, 0C
0040CDA9 83C3 04 add ebx, 4
0040CDAC 8D4D B4 lea ecx, dword ptr [ebp-4C]
0040CDAF 8D85 B0F3FFFF lea eax, dword ptr [ebp-C50]
0040CDB5 6A 04 push 4
0040CDB7 51 push ecx
0040CDB8 03C3 add eax, ebx
0040CDBA 50 push eax
0040CDBB E8 74591200 call <_memcpy>
0040CDC0 > 83C4 0C add esp, 0C
0040CDC3 83C3 04 add ebx, 4
0040CDC6 8D96 641A0000 lea edx, dword ptr [esi+1A64]
0040CDCC 8D8D B0F3FFFF lea ecx, dword ptr [ebp-C50]
0040CDD2 6A 04 push 4
0040CDD4 52 push edx
0040CDD5 03CB add ecx, ebx
0040CDD7 51 push ecx
0040CDD8 E8 57591200 call <_memcpy>
0040CDDD 83C4 0C add esp, 0C
0040CDE0 83C3 04 add ebx, 4
0040CDE3 8D45 B0 lea eax, dword ptr [ebp-50]
0040CDE6 8D95 B0F3FFFF lea edx, dword ptr [ebp-C50]
0040CDEC 6A 04 push 4
0040CDEE 50 push eax
0040CDEF 03D3 add edx, ebx
0040CDF1 52 push edx
0040CDF2 E8 3D591200 call <_memcpy>
0040CDF7 83C4 0C add esp, 0C
0040CDFA 8B5F 04 mov ebx, dword ptr [edi+4]
0040CDFD 8B86 641A0000 mov eax, dword ptr [esi+1A64]
0040CE03 85C0 test eax, eax
0040CE05 79 03 jns short <loc_40CE0A>
0040CE07 83C0 07 add eax, 7
0040CE0A > C1F8 03 sar eax, 3
0040CE0D 0FAFD8 imul ebx, eax
0040CE10 83C3 03 add ebx, 3
0040CE13 8BD3 mov edx, ebx
0040CE15 81E2 03000080 and edx, 80000003
0040CE1B 79 05 jns short <loc_40CE22>
0040CE1D 4A dec edx
0040CE1E 83CA FC or edx, FFFFFFFC
0040CE21 42 inc edx
0040CE22 > 2BDA sub ebx, edx
0040CE24 8B4F 08 mov ecx, dword ptr [edi+8]
0040CE27 0FAFCB imul ecx, ebx
0040CE2A 8BD9 mov ebx, ecx
0040CE2C 8D86 F8190000 lea eax, dword ptr [esi+19F8]
0040CE32 E8 7552FFFF call <sub_4020AC>
0040CE37 50 push eax
0040CE38 E8 9F8B1400 call <SetCurrentDirectoryA> ; jmp 到 kernel32.SetCurrentDirectoryA
0040CE3D 8B96 6C1A0000 mov edx, dword ptr [esi+1A6C]
0040CE43 52 push edx
0040CE44 8D8D B0F3FFFF lea ecx, dword ptr [ebp-C50]
0040CE4A 51 push ecx
0040CE4B E8 28660A00 call <_realloc>
0040CE50 83C4 08 add esp, 8
0040CE53 8BF8 mov edi, eax
0040CE55 837D C4 01 cmp dword ptr [ebp-3C], 1
0040CE59 75 0C jnz short <loc_40CE67>
0040CE5B 8D86 DC150000 lea eax, dword ptr [esi+15DC]
0040CE61 50 push eax
0040CE62 E8 59891400 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
0040CE67 > 4F dec edi
0040CE68 74 30 je short <loc_40CE9A>
0040CE6A 33C0 xor eax, eax
0040CE6C > BA 02000000 mov edx, 2
0040CE71 50 push eax
0040CE72 8D45 F8 lea eax, dword ptr [ebp-8]
0040CE75 FF4D E8 dec dword ptr [ebp-18]
0040CE78 E8 13441300 call <sub_541290>
0040CE7D FF4D E8 dec dword ptr [ebp-18]
0040CE80 8D45 FC lea eax, dword ptr [ebp-4]
0040CE83 BA 02000000 mov edx, 2
0040CE88 E8 03441300 call <sub_541290>
0040CE8D 58 pop eax
0040CE8E 8B55 CC mov edx, dword ptr [ebp-34]
0040CE91 64:8915 0000000>mov dword ptr fs:[0], edx
0040CE98 EB 4C jmp short <loc_40CEE6>
0040CE9A > 83BE 641A0000 1>cmp dword ptr [esi+1A64], 10
0040CEA1 75 0D jnz short <loc_40CEB0>
0040CEA3 53 push ebx
0040CEA4 E8 F7501200 call <@$bnwa$qui>
0040CEA9 59 pop ecx
0040CEAA 8986 681A0000 mov dword ptr [esi+1A68], eax
0040CEB0 > 33C9 xor ecx, ecx
0040CEB2 B0 01 mov al, 1
0040CEB4 898E 601A0000 mov dword ptr [esi+1A60], ecx
0040CEBA 50 push eax
0040CEBB FF4D E8 dec dword ptr [ebp-18]
0040CEBE 8D45 F8 lea eax, dword ptr [ebp-8]
0040CEC1 BA 02000000 mov edx, 2
0040CEC6 E8 C5431300 call <sub_541290>
0040CECB FF4D E8 dec dword ptr [ebp-18]
0040CECE 8D45 FC lea eax, dword ptr [ebp-4]
0040CED1 BA 02000000 mov edx, 2
0040CED6 E8 B5431300 call <sub_541290>
0040CEDB 58 pop eax
0040CEDC 8B55 CC mov edx, dword ptr [ebp-34]
0040CEDF 64:8915 0000000>mov dword ptr fs:[0], edx
0040CEE6 > 5F pop edi
0040CEE7 5E pop esi
0040CEE8 > 5B pop ebx
0040CEE9 8BE5 mov esp, ebp
0040CEEB 5D pop ebp
0040CEEC C3 retn
0040CEED 90 nop
0040CEEE 90 nop
0040CEEF 90 nop
0040CEF0 > 55 push ebp
0040CEF1 8BEC mov ebp, esp
0040CEF3 8B45 08 mov eax, dword ptr [ebp+8]
0040CEF6 6A 00 push 0
0040CEF8 > 50 push eax
0040CEF9 E8 6A880400 call <sub_455768>
0040CEFE 83C4 08 add esp, 8
0040CF01 5D pop ebp
0040CF02 C3 retn
0040CF03 90 nop
0040CF04 > 55 push ebp
0040CF05 8BEC mov ebp, esp
0040CF07 81C4 18FEFFFF add esp, -1E8
0040CF0D 53 push ebx
0040CF0E 8B5D 08 mov ebx, dword ptr [ebp+8]
0040CF11 68 E8010000 push 1E8
0040CF16 6A 00 push 0
0040CF18 > 8D85 18FEFFFF lea eax, dword ptr [ebp-1E8]
0040CF1E 50 push eax
0040CF1F E8 80581200 call <_memset>
0040CF24 83C4 0C add esp, 0C
0040CF27 C785 18FEFFFF E>mov dword ptr [ebp-1E8], 1E8
0040CF31 8BC3 mov eax, ebx
0040CF33 E8 C0620F00 call <@Controls@TWinControl@Get>
0040CF38 > 8985 1CFEFFFF mov dword ptr [ebp-1E4], eax
0040CF3E 68 80000000 push 80
0040CF43 68 AEF55500 push 0055F5AE ; 屏幕录像专家
0040CF48 > 8D95 30FEFFFF lea edx, dword ptr [ebp-1D0]
0040CF4E 52 push edx
0040CF4F E8 245B1200 call <_strncpy>
0040CF54 83C4 0C add esp, 0C
0040CF57 8B0D A4D75900 mov ecx, dword ptr [59D7A4] ; 屏录专家.005A8384
0040CF5D 8B01 mov eax, dword ptr [ecx]
0040CF5F 8B80 88000000 mov eax, dword ptr [eax+88]
0040CF65 E8 32370D00 call <@Graphics@TIcon@GetHandle>
0040CF6A 8985 2CFEFFFF mov dword ptr [ebp-1D4], eax
0040CF70 8D95 18FEFFFF lea edx, dword ptr [ebp-1E8]
0040CF76 C785 28FEFFFF 0>mov dword ptr [ebp-1D8], 402
0040CF80 C785 24FEFFFF 0>mov dword ptr [ebp-1DC], 7
0040CF8A 52 push edx
0040CF8B 6A 00 push 0
0040CF8D E8 528E1400 call <Shell_NotifyIconA> ; jmp 到 SHELL32.Shell_NotifyIconA
0040CF92 C683 CD150000 0>mov byte ptr [ebx+15CD], 1
0040CF99 5B pop ebx
0040CF9A 8BE5 mov esp, ebp
0040CF9C 5D pop ebp
0040CF9D C3 retn
004443E8 > 55 push ebp ; EXE转换FLASH按钮事件
004443E9 8BEC mov ebp, esp
004443EB 81C4 04F0FFFF add esp, -0FFC
004443F1 50 push eax
004443F2 81C4 20FFFFFF add esp, -0E0
004443F8 53 push ebx
004443F9 56 push esi
004443FA 57 push edi
004443FB 8995 68FDFFFF mov dword ptr [ebp-298], edx
00444401 8985 6CFDFFFF mov dword ptr [ebp-294], eax
00444407 B8 30B55600 mov eax, 0056B530
0044440C E8 C7E70E00 call <@__InitExceptBlockLDTC>
00444411 66:C785 80FDFFF>mov word ptr [ebp-280], 8
0044441A 8D45 FC lea eax, dword ptr [ebp-4]
0044441D E8 36D5FBFF call <unknown_libname_55>
00444422 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444428 BA 97D25500 mov edx, 0055D297
0044442D 66:C785 80FDFFF>mov word ptr [ebp-280], 14
00444436 66:C785 80FDFFF>mov word ptr [ebp-280], 20
0044443F 8D45 F0 lea eax, dword ptr [ebp-10]
00444442 E8 9DCB0F00 call <sub_540FE4>
00444447 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044444D 8D55 F0 lea edx, dword ptr [ebp-10]
00444450 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444456 05 D4150000 add eax, 15D4
0044445B E8 14CF0F00 call <@System@AnsiString@$beql$xq>
00444460 84C0 test al, al
00444462 0F85 A6000000 jnz <loc_44450E>
00444468 8D45 EC lea eax, dword ptr [ebp-14]
0044446B E8 E8D4FBFF call <unknown_libname_55>
00444470 8BD0 mov edx, eax
00444472 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444478 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044447E 8B81 D4150000 mov eax, dword ptr [ecx+15D4]
00444484 E8 53390E00 call <@Sysutils@ExtractFileExt$qq>
00444489 8D55 EC lea edx, dword ptr [ebp-14]
0044448C 8D45 E8 lea eax, dword ptr [ebp-18]
0044448F 52 push edx
00444490 E8 C3D4FBFF call <unknown_libname_55>
00444495 8BD0 mov edx, eax
00444497 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044449D 58 pop eax
0044449E E8 EDCF0F00 call <sub_541490>
004444A3 8D55 E8 lea edx, dword ptr [ebp-18]
004444A6 52 push edx
004444A7 BA 98D25500 mov edx, 0055D298 ; ASCII ".exe"
004444AC 8D45 E4 lea eax, dword ptr [ebp-1C]
004444AF E8 30CB0F00 call <sub_540FE4>
004444B4 FF85 8CFDFFFF inc dword ptr [ebp-274]
004444BA 8D55 E4 lea edx, dword ptr [ebp-1C]
004444BD 58 pop eax
004444BE E8 C9CE0F00 call <@System@AnsiString@$bneq$xq>
004444C3 84C0 test al, al
004444C5 8D45 E4 lea eax, dword ptr [ebp-1C]
004444C8 0F95C1 setne cl
004444CB 83E1 01 and ecx, 1
004444CE BA 02000000 mov edx, 2
004444D3 51 push ecx
004444D4 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004444DA E8 B1CD0F00 call <sub_541290>
004444DF FF8D 8CFDFFFF dec dword ptr [ebp-274]
004444E5 8D45 E8 lea eax, dword ptr [ebp-18]
004444E8 BA 02000000 mov edx, 2
004444ED E8 9ECD0F00 call <sub_541290>
004444F2 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004444F8 8D45 EC lea eax, dword ptr [ebp-14]
004444FB BA 02000000 mov edx, 2
00444500 E8 8BCD0F00 call <sub_541290>
00444505 59 pop ecx
00444506 85C9 test ecx, ecx
00444508 75 04 jnz short <loc_44450E>
0044450A 33C0 xor eax, eax
0044450C EB 05 jmp short <loc_444513>
0044450E > B8 01000000 mov eax, 1
00444513 > 50 push eax
00444514 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044451A 8D45 F0 lea eax, dword ptr [ebp-10]
0044451D BA 02000000 mov edx, 2
00444522 E8 69CD0F00 call <sub_541290>
00444527 59 pop ecx
00444528 84C9 test cl, cl
0044452A 74 5B je short <loc_444587>
0044452C 66:C785 80FDFFF>mov word ptr [ebp-280], 2C
00444535 BA 9DD25500 mov edx, 0055D29D
0044453A 8D45 E0 lea eax, dword ptr [ebp-20]
0044453D E8 A2CA0F00 call <sub_540FE4>
00444542 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444548 8B00 mov eax, dword ptr [eax]
0044454A E8 55370B00 call <@Dialogs@ShowMessage$qqrx17>
0044454F FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444555 8D45 E0 lea eax, dword ptr [ebp-20]
00444558 > BA 02000000 mov edx, 2
0044455D E8 2ECD0F00 call <sub_541290>
00444562 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444568 8D45 FC lea eax, dword ptr [ebp-4]
0044456B BA 02000000 mov edx, 2
00444570 E8 1BCD0F00 call <sub_541290>
00444575 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
0044457B 64:890D 0000000>mov dword ptr fs:[0], ecx
00444582 E9 89440000 jmp <loc_448A10>
00444587 > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
0044458D 8B90 D4150000 mov edx, dword ptr [eax+15D4]
00444593 52 push edx
00444594 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044459A 51 push ecx
0044459B E8 20E2FEFF call <sub_4327C0>
004445A0 > 83C4 08 add esp, 8
004445A3 8985 64FDFFFF mov dword ptr [ebp-29C], eax
004445A9 83BD 64FDFFFF 0>cmp dword ptr [ebp-29C], 8
004445B0 > 7D 5B jge short <aLc_time_0>
004445B2 66:C785 80FDFFF>mov word ptr [ebp-280], 38
004445BB > BA C5D25500 mov edx, 0055D2C5
004445C0 8D45 DC lea eax, dword ptr [ebp-24]
004445C3 > E8 1CCA0F00 call <sub_540FE4>
004445C8 FF85 8CFDFFFF inc dword ptr [ebp-274]
004445CE > 8B00 mov eax, dword ptr [eax]
004445D0 E8 CF360B00 call <@Dialogs@ShowMessage$qqrx17>
004445D5 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004445DB 8D45 DC lea eax, dword ptr [ebp-24]
004445DE BA 02000000 mov edx, 2
004445E3 E8 A8CC0F00 call <sub_541290>
004445E8 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004445EE 8D45 FC lea eax, dword ptr [ebp-4]
004445F1 > BA 02000000 mov edx, 2
004445F6 E8 95CC0F00 call <sub_541290>
004445FB > 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00444601 > 64:890D 0000000>mov dword ptr fs:[0], ecx
00444608 E9 03440000 jmp <loc_448A10>
0044460D > 83BD 64FDFFFF 6>cmp dword ptr [ebp-29C], 64
00444614 7E 5B jle short <loc_444671>
00444616 66:C785 80FDFFF>mov word ptr [ebp-280], 44
0044461F BA EFD25500 mov edx, 0055D2EF
00444624 8D45 D8 lea eax, dword ptr [ebp-28]
00444627 E8 B8C90F00 call <sub_540FE4>
0044462C FF85 8CFDFFFF inc dword ptr [ebp-274]
00444632 8B00 mov eax, dword ptr [eax]
00444634 > E8 6B360B00 call <@Dialogs@ShowMessage$qqrx17>
00444639 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044463F 8D45 D8 lea eax, dword ptr [ebp-28]
00444642 BA 02000000 mov edx, 2
00444647 E8 44CC0F00 call <sub_541290>
0044464C FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444652 8D45 FC lea eax, dword ptr [ebp-4]
00444655 BA 02000000 mov edx, 2
0044465A E8 31CC0F00 call <sub_541290>
0044465F 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00444665 64:890D 0000000>mov dword ptr fs:[0], ecx
0044466C E9 9F430000 jmp <loc_448A10>
00444671 > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444677 50 push eax
00444678 E8 4703FDFF call <sub_4149C4>
0044467D 59 pop ecx
0044467E 8985 50FDFFFF mov dword ptr [ebp-2B0], eax
00444684 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
0044468A 8B8A D4150000 mov ecx, dword ptr [edx+15D4]
00444690 51 push ecx
00444691 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444697 50 push eax
00444698 E8 8BC9FFFF call <sub_441028>
0044469D 83C4 08 add esp, 8
004446A0 85C0 test eax, eax
004446A2 74 5B je short <loc_4446FF>
004446A4 > 66:C785 80FDFFF>mov word ptr [ebp-280], 50
004446AD BA 12D35500 mov edx, 0055D312
004446B2 8D45 D4 lea eax, dword ptr [ebp-2C]
004446B5 E8 2AC90F00 call <sub_540FE4>
004446BA FF85 8CFDFFFF inc dword ptr [ebp-274]
004446C0 8B00 mov eax, dword ptr [eax]
004446C2 E8 DD350B00 call <@Dialogs@ShowMessage$qqrx17>
004446C7 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004446CD 8D45 D4 lea eax, dword ptr [ebp-2C]
004446D0 BA 02000000 mov edx, 2
004446D5 E8 B6CB0F00 call <sub_541290>
004446DA FF8D 8CFDFFFF dec dword ptr [ebp-274]
004446E0 8D45 FC lea eax, dword ptr [ebp-4]
004446E3 BA 02000000 mov edx, 2
004446E8 E8 A3CB0F00 call <sub_541290>
004446ED 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
004446F3 64:890D 0000000>mov dword ptr fs:[0], ecx
004446FA E9 11430000 jmp <loc_448A10>
004446FF > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444705 8B90 D4150000 mov edx, dword ptr [eax+15D4]
0044470B 52 push edx
0044470C 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00444712 51 push ecx
00444713 E8 28D3FFFF call <sub_441A40>
00444718 83C4 08 add esp, 8
0044471B 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
00444721 83BD 60FDFFFF 0>cmp dword ptr [ebp-2A0], 5
00444728 74 09 je short <loc_444733>
0044472A 83BD 60FDFFFF 0>cmp dword ptr [ebp-2A0], 6
00444731 75 5B jnz short <loc_44478E>
00444733 > 66:C785 80FDFFF>mov word ptr [ebp-280], 5C
0044473C BA 30D35500 mov edx, 0055D330
00444741 8D45 D0 lea eax, dword ptr [ebp-30]
00444744 E8 9BC80F00 call <sub_540FE4>
00444749 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044474F 8B00 mov eax, dword ptr [eax]
00444751 E8 4E350B00 call <@Dialogs@ShowMessage$qqrx17>
00444756 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044475C 8D45 D0 lea eax, dword ptr [ebp-30]
0044475F BA 02000000 mov edx, 2
00444764 E8 27CB0F00 call <sub_541290>
00444769 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044476F 8D45 FC lea eax, dword ptr [ebp-4]
00444772 BA 02000000 mov edx, 2
00444777 E8 14CB0F00 call <sub_541290>
0044477C 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00444782 64:890D 0000000>mov dword ptr fs:[0], ecx
00444789 E9 82420000 jmp <loc_448A10>
0044478E > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444794 8B90 D4150000 mov edx, dword ptr [eax+15D4]
0044479A 52 push edx
0044479B 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
004447A1 51 push ecx
004447A2 E8 91420000 call <sub_448A38>
004447A7 83C4 08 add esp, 8
004447AA 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
004447B0 > 83BD 60FDFFFF 0>cmp dword ptr [ebp-2A0], 0
004447B7 > 75 5B jnz short <loc_444814>
004447B9 > 66:C785 80FDFFF>mov word ptr [ebp-280], 68
004447C2 > BA 50D35500 mov edx, 0055D350
004447C7 > 8D45 CC lea eax, dword ptr [ebp-34]
004447CA E8 15C80F00 call <sub_540FE4>
004447CF FF85 8CFDFFFF inc dword ptr [ebp-274]
004447D5 8B00 mov eax, dword ptr [eax]
004447D7 E8 C8340B00 call <@Dialogs@ShowMessage$qqrx17>
004447DC FF8D 8CFDFFFF dec dword ptr [ebp-274]
004447E2 8D45 CC lea eax, dword ptr [ebp-34]
004447E5 BA 02000000 mov edx, 2
004447EA E8 A1CA0F00 call <sub_541290>
004447EF > FF8D 8CFDFFFF dec dword ptr [ebp-274]
004447F5 8D45 FC lea eax, dword ptr [ebp-4]
004447F8 BA 02000000 mov edx, 2
004447FD E8 8ECA0F00 call <sub_541290>
00444802 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00444808 > 64:890D 0000000>mov dword ptr fs:[0], ecx
0044480F E9 FC410000 jmp <loc_448A10>
00444814 > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
0044481A 8B90 A00C0000 mov edx, dword ptr [eax+CA0]
00444820 81C2 0DFCFFFF add edx, -3F3
00444826 3B95 50FDFFFF cmp edx, dword ptr [ebp-2B0]
0044482C > 74 3E je short <loc_44486C>
0044482E 66:C785 80FDFFF>mov word ptr [ebp-280], 74
00444837 BA 6FD35500 mov edx, 0055D36F
0044483C > 8D45 C8 lea eax, dword ptr [ebp-38]
0044483F E8 A0C70F00 call <sub_540FE4>
00444844 > FF85 8CFDFFFF inc dword ptr [ebp-274]
0044484A 8B00 mov eax, dword ptr [eax]
0044484C > E8 53340B00 call <@Dialogs@ShowMessage$qqrx17>
00444851 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444857 8D45 C8 lea eax, dword ptr [ebp-38]
0044485A BA 02000000 mov edx, 2
0044485F E8 2CCA0F00 call <sub_541290>
00444864 6A 00 push 0
00444866 E8 BD720F00 call <_exit>
0044486B 59 pop ecx
0044486C > 8D8D 84F8FFFF lea ecx, dword ptr [ebp-77C]
00444872 51 push ecx
00444873 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444879 8B90 D4150000 mov edx, dword ptr [eax+15D4]
0044487F 52 push edx
00444880 > 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00444886 51 push ecx
00444887 E8 40430000 call <sub_448BCC>
0044488C 83C4 0C add esp, 0C
0044488F 81BD 90F8FFFF 7>cmp dword ptr [ebp-770], 1770
00444899 7E 47 jle short <loc_4448E2>
0044489B 6A 01 push 1
0044489D 68 2FD45500 push 0055D42F
004448A2 > 68 AAD35500 push 0055D3AA
004448A7 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
004448AD E8 46E90B00 call <@Controls@TWinControl@GetHa>
004448B2 > 50 push eax
004448B3 E8 E6171100 call <MessageBoxA> ; jmp 到 USER32.MessageBoxA
004448B8 83F8 02 cmp eax, 2
004448BB 75 25 jnz short <loc_4448E2>
004448BD FF8D 8CFDFFFF dec dword ptr [ebp-274]
004448C3 8D45 FC lea eax, dword ptr [ebp-4]
004448C6 > BA 02000000 mov edx, 2
004448CB E8 C0C90F00 call <sub_541290>
004448D0 > 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
004448D6 64:890D 0000000>mov dword ptr fs:[0], ecx
004448DD E9 2E410000 jmp <loc_448A10>
004448E2 > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
004448E8 8B90 D4150000 mov edx, dword ptr [eax+15D4]
004448EE 52 push edx
004448EF 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
004448F5 51 push ecx
004448F6 E8 31F8FCFF call <sub_41412C>
004448FB 83C4 08 add esp, 8
004448FE 05 0010F5FF add eax, FFF51000
00444903 8985 28EFFFFF mov dword ptr [ebp-10D8], eax
00444909 > DB85 28EFFFFF fild dword ptr [ebp-10D8]
0044490F D99D 4CFDFFFF fstp dword ptr [ebp-2B4]
00444915 8B85 88F8FFFF mov eax, dword ptr [ebp-778]
0044491B F7AD 8CF8FFFF imul dword ptr [ebp-774]
00444921 8985 28EFFFFF mov dword ptr [ebp-10D8], eax
00444927 > DB85 28EFFFFF fild dword ptr [ebp-10D8]
0044492D D80D 188A4400 fmul dword ptr [<flt_448A18>]
00444933 DB85 90F8FFFF fild dword ptr [ebp-770]
00444939 DEC9 fmulp st(1), st(0)
0044493B D99D 48FDFFFF fstp dword ptr [ebp-2B8]
00444941 D985 4CFDFFFF fld dword ptr [ebp-2B4]
00444947 D80D 1C8A4400 fmul dword ptr [<flt_448A1C>]
0044494D D89D 48FDFFFF fcomp dword ptr [ebp-2B8]
00444953 DFE0 fstsw ax
00444955 9E sahf
00444956 76 47 jbe short <loc_44499F>
00444958 6A 01 push 1
0044495A 68 A2D45500 push 0055D4A2
0044495F 68 3CD45500 push 0055D43C
00444964 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
0044496A E8 89E80B00 call <@Controls@TWinControl@GetHa>
0044496F 50 push eax
00444970 E8 29171100 call <MessageBoxA> ; jmp 到 USER32.MessageBoxA
00444975 83F8 02 cmp eax, 2
00444978 75 25 jnz short <loc_44499F>
0044497A FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444980 8D45 FC lea eax, dword ptr [ebp-4]
00444983 BA 02000000 mov edx, 2
00444988 E8 03C90F00 call <sub_541290>
0044498D 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00444993 64:890D 0000000>mov dword ptr fs:[0], ecx
0044499A E9 71400000 jmp <loc_448A10>
0044499F > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
004449A5 8B90 D4150000 mov edx, dword ptr [eax+15D4]
004449AB 52 push edx
004449AC 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
004449B2 51 push ecx
004449B3 E8 60430000 call <sub_448D18>
004449B8 > 83C4 08 add esp, 8
004449BB 25 FF000000 and eax, 0FF
004449C0 8985 64FDFFFF mov dword ptr [ebp-29C], eax
004449C6 66:C785 80FDFFF>mov word ptr [ebp-280], 80
004449CF 8D45 BC lea eax, dword ptr [ebp-44]
004449D2 E8 81CFFBFF call <unknown_libname_55>
004449D7 50 push eax
004449D8 FF85 8CFDFFFF inc dword ptr [ebp-274]
004449DE BA AFD45500 mov edx, 0055D4AF
004449E3 8D45 C0 lea eax, dword ptr [ebp-40]
004449E6 E8 F9C50F00 call <sub_540FE4>
004449EB FF85 8CFDFFFF inc dword ptr [ebp-274]
004449F1 8D55 C0 lea edx, dword ptr [ebp-40]
004449F4 > 52 push edx
004449F5 B8 E8030000 mov eax, 3E8
004449FA 99 cdq
004449FB F7BD 98F8FFFF idiv dword ptr [ebp-768]
00444A01 8BD0 mov edx, eax
00444A03 8D45 C4 lea eax, dword ptr [ebp-3C]
00444A06 E8 09C70F00 call <@System@WideString@$bctr$qq>
00444A0B FF85 8CFDFFFF inc dword ptr [ebp-274]
00444A11 5A pop edx
00444A12 59 pop ecx
00444A13 E8 D0C80F00 call <@System@AnsiString@$badd$xq>
00444A18 > A1 20D75900 mov eax, dword ptr [59D720]
00444A1D 8D55 BC lea edx, dword ptr [ebp-44]
00444A20 8B08 mov ecx, dword ptr [eax]
00444A22 8B12 mov edx, dword ptr [edx]
00444A24 8B81 E0020000 mov eax, dword ptr [ecx+2E0]
00444A2A E8 D5860B00 call <@Controls@TControl@SetText$>
00444A2F FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444A35 8D45 BC lea eax, dword ptr [ebp-44]
00444A38 BA 02000000 mov edx, 2
00444A3D E8 4EC80F00 call <sub_541290>
00444A42 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444A48 8D45 C0 lea eax, dword ptr [ebp-40]
00444A4B BA 02000000 mov edx, 2
00444A50 E8 3BC80F00 call <sub_541290>
00444A55 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444A5B 8D45 C4 lea eax, dword ptr [ebp-3C]
00444A5E BA 02000000 mov edx, 2
00444A63 E8 28C80F00 call <sub_541290>
00444A68 B8 E8030000 mov eax, 3E8
00444A6D 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00444A73 99 cdq
00444A74 > F7BD 98F8FFFF idiv dword ptr [ebp-768]
00444A7A 8B11 mov edx, dword ptr [ecx]
00444A7C > 8982 28030000 mov dword ptr [edx+328], eax
00444A82 83BD A8F8FFFF 0>cmp dword ptr [ebp-758], 1
00444A89 75 16 jnz short <loc_444AA1>
00444A8B A1 20D75900 mov eax, dword ptr [59D720]
00444A90 8B08 mov ecx, dword ptr [eax]
00444A92 8B81 D4020000 mov eax, dword ptr [ecx+2D4]
00444A98 B2 01 mov dl, 1
00444A9A 8B08 mov ecx, dword ptr [eax]
00444A9C FF51 5C call dword ptr [ecx+5C]
00444A9F EB 2B jmp short <loc_444ACC>
00444AA1 > A1 20D75900 mov eax, dword ptr [59D720]
00444AA6 8B10 mov edx, dword ptr [eax]
00444AA8 8B82 D4020000 mov eax, dword ptr [edx+2D4]
00444AAE 33D2 xor edx, edx
00444AB0 8B08 mov ecx, dword ptr [eax]
00444AB2 FF91 B8000000 call dword ptr [ecx+B8]
00444AB8 A1 20D75900 mov eax, dword ptr [59D720]
00444ABD 8B10 mov edx, dword ptr [eax]
00444ABF 8B82 D4020000 mov eax, dword ptr [edx+2D4]
00444AC5 33D2 xor edx, edx
00444AC7 8B08 mov ecx, dword ptr [eax]
00444AC9 FF51 5C call dword ptr [ecx+5C]
00444ACC > 83BD 64FDFFFF 0>cmp dword ptr [ebp-29C], 1
00444AD3 75 2D jnz short <loc_444B02>
00444AD5 A1 20D75900 mov eax, dword ptr [59D720]
00444ADA 8B10 mov edx, dword ptr [eax]
00444ADC > 8B82 00030000 mov eax, dword ptr [edx+300]
00444AE2 B2 01 mov dl, 1
00444AE4 8B08 mov ecx, dword ptr [eax]
00444AE6 FF51 5C call dword ptr [ecx+5C]
00444AE9 A1 20D75900 mov eax, dword ptr [59D720]
00444AEE 8B10 mov edx, dword ptr [eax]
00444AF0 8B82 00030000 mov eax, dword ptr [edx+300]
00444AF6 B2 01 mov dl, 1
00444AF8 > 8B08 mov ecx, dword ptr [eax]
00444AFA FF91 B8000000 call dword ptr [ecx+B8]
00444B00 EB 2B jmp short <loc_444B2D>
00444B02 > A1 20D75900 mov eax, dword ptr [59D720]
00444B07 8B10 mov edx, dword ptr [eax]
00444B09 8B82 00030000 mov eax, dword ptr [edx+300]
00444B0F 33D2 xor edx, edx
00444B11 8B08 mov ecx, dword ptr [eax]
00444B13 FF51 5C call dword ptr [ecx+5C]
00444B16 A1 20D75900 mov eax, dword ptr [59D720]
00444B1B 8B10 mov edx, dword ptr [eax]
00444B1D 8B82 00030000 mov eax, dword ptr [edx+300]
00444B23 33D2 xor edx, edx
00444B25 8B08 mov ecx, dword ptr [eax]
00444B27 FF91 B8000000 call dword ptr [ecx+B8]
00444B2D > A1 20D75900 mov eax, dword ptr [59D720]
00444B32 8B00 mov eax, dword ptr [eax]
00444B34 8B10 mov edx, dword ptr [eax]
00444B36 FF92 D8000000 call dword ptr [edx+D8]
00444B3C 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00444B42 8B01 mov eax, dword ptr [ecx]
00444B44 83B8 20030000 0>cmp dword ptr [eax+320], 0
00444B4B 75 25 jnz short <loc_444B72>
00444B4D FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444B53 8D45 FC lea eax, dword ptr [ebp-4]
00444B56 BA 02000000 mov edx, 2
00444B5B E8 30C70F00 call <sub_541290>
00444B60 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00444B66 64:890D 0000000>mov dword ptr fs:[0], ecx
00444B6D E9 9E3E0000 jmp <loc_448A10>
00444B72 > 66:C785 80FDFFF>mov word ptr [ebp-280], 8C
00444B7B BA B5D45500 mov edx, 0055D4B5
00444B80 > 8D45 B8 lea eax, dword ptr [ebp-48]
00444B83 E8 5CC40F00 call <sub_540FE4>
00444B88 > 8BD0 mov edx, eax
00444B8A FF85 8CFDFFFF inc dword ptr [ebp-274]
00444B90 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444B96 8B80 E0040000 mov eax, dword ptr [eax+4E0]
00444B9C 83C0 70 add eax, 70
00444B9F E8 1CC70F00 call <sub_5412C0>
00444BA4 > FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444BAA 8D45 B8 lea eax, dword ptr [ebp-48]
00444BAD BA 02000000 mov edx, 2
00444BB2 E8 D9C60F00 call <sub_541290>
00444BB7 66:C785 80FDFFF>mov word ptr [ebp-280], 98
00444BC0 BA B6D45500 mov edx, 0055D4B6 ; ASCII "swf"
00444BC5 8D45 B4 lea eax, dword ptr [ebp-4C]
00444BC8 E8 17C40F00 call <sub_540FE4>
00444BCD 8BD0 mov edx, eax
00444BCF FF85 8CFDFFFF inc dword ptr [ebp-274]
00444BD5 > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444BDB 8B80 E0040000 mov eax, dword ptr [eax+4E0]
00444BE1 83C0 6C add eax, 6C
00444BE4 > E8 D7C60F00 call <sub_5412C0>
00444BE9 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444BEF 8D45 B4 lea eax, dword ptr [ebp-4C]
00444BF2 BA 02000000 mov edx, 2
00444BF7 E8 94C60F00 call <sub_541290>
00444BFC 66:C785 80FDFFF>mov word ptr [ebp-280], 0A4
00444C05 BA BAD45500 mov edx, 0055D4BA ; ASCII "*.swf|*.swf"
00444C0A 8D45 B0 lea eax, dword ptr [ebp-50]
00444C0D E8 D2C30F00 call <sub_540FE4>
00444C12 8BD0 mov edx, eax
00444C14 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444C1A 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00444C20 > 8B80 E0040000 mov eax, dword ptr [eax+4E0]
00444C26 83C0 58 add eax, 58
00444C29 E8 92C60F00 call <sub_5412C0>
00444C2E FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444C34 > 8D45 B0 lea eax, dword ptr [ebp-50]
00444C37 BA 02000000 mov edx, 2
00444C3C E8 4FC60F00 call <sub_541290>
00444C41 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00444C47 8B81 E0040000 mov eax, dword ptr [ecx+4E0]
00444C4D 8B10 mov edx, dword ptr [eax]
00444C4F FF52 3C call dword ptr [edx+3C]
00444C52 > 84C0 test al, al
00444C54 75 25 jnz short <loc_444C7B>
00444C56 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444C5C > 8D45 FC lea eax, dword ptr [ebp-4]
00444C5F BA 02000000 mov edx, 2
00444C64 > E8 27C60F00 call <sub_541290>
00444C69 > 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00444C6F 64:890D 0000000>mov dword ptr fs:[0], ecx
00444C76 E9 953D0000 jmp <loc_448A10>
00444C7B > 66:C785 80FDFFF>mov word ptr [ebp-280], 0B0
00444C84 8D45 AC lea eax, dword ptr [ebp-54]
00444C87 E8 CCCCFBFF call <unknown_libname_55>
00444C8C 8BD0 mov edx, eax
00444C8E FF85 8CFDFFFF inc dword ptr [ebp-274]
00444C94 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00444C9A 8B81 E0040000 mov eax, dword ptr [ecx+4E0]
00444CA0 E8 531A0B00 call <sub_4F66F8>
00444CA5 8D45 AC lea eax, dword ptr [ebp-54]
00444CA8 E8 FFD3FBFF call <sub_4020AC>
00444CAD 8BF8 mov edi, eax
00444CAF 33C0 xor eax, eax
00444CB1 83C9 FF or ecx, FFFFFFFF
00444CB4 8DB5 ACF8FFFF lea esi, dword ptr [ebp-754]
00444CBA F2:AE repne scas byte ptr es:[edi]
00444CBC F7D1 not ecx
00444CBE 2BF9 sub edi, ecx
00444CC0 8BD1 mov edx, ecx
00444CC2 87F7 xchg edi, esi
00444CC4 C1E9 02 shr ecx, 2
00444CC7 8BC7 mov eax, edi
00444CC9 F3:A5 rep movs dword ptr es:[edi], dwo>
00444CCB > 8BCA mov ecx, edx
00444CCD BA 02000000 mov edx, 2
00444CD2 83E1 03 and ecx, 3
00444CD5 8D45 AC lea eax, dword ptr [ebp-54]
00444CD8 F3:A4 rep movs byte ptr es:[edi], byte>
00444CDA FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444CE0 E8 ABC50F00 call <sub_541290>
00444CE5 8D8D ACF8FFFF lea ecx, dword ptr [ebp-754]
00444CEB 51 push ecx
00444CEC E8 E7DB0E00 call <_strlen>
00444CF1 59 pop ecx
00444CF2 C68405 A9F8FFFF>mov byte ptr [ebp+eax-757], 0
00444CFA 68 C6D45500 push 0055D4C6 ; ASCII "htm"
00444CFF 8D85 ACF8FFFF lea eax, dword ptr [ebp-754]
00444D05 50 push eax
00444D06 E8 3DDB0E00 call <_strcat>
00444D0B 83C4 08 add esp, 8
00444D0E 8B15 20D75900 mov edx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00444D14 8B0A mov ecx, dword ptr [edx]
00444D16 8B81 EC020000 mov eax, dword ptr [ecx+2EC]
00444D1C 8B10 mov edx, dword ptr [eax]
00444D1E FF92 B4000000 call dword ptr [edx+B4]
00444D24 3C 01 cmp al, 1
00444D26 0F85 0C070000 jnz <loc_445438>
00444D2C > B2 01 mov dl, 1
00444D2E A1 308D5100 mov eax, dword ptr [<off_518D30>>
00444D33 E8 8460FCFF call <sub_40ADBC>
00444D38 > 8BD8 mov ebx, eax
00444D3A 8BC3 mov eax, ebx
00444D3C > 8B10 mov edx, dword ptr [eax]
00444D3E FF52 40 call dword ptr [edx+40]
00444D41 66:C785 80FDFFF>mov word ptr [ebp-280], 0BC
00444D4A BA CAD45500 mov edx, 0055D4CA ; ASCII "<HTML>"
00444D4F 8D45 A8 lea eax, dword ptr [ebp-58]
00444D52 E8 8DC20F00 call <sub_540FE4>
00444D57 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444D5D 8B10 mov edx, dword ptr [eax]
00444D5F 8BC3 mov eax, ebx
00444D61 8B08 mov ecx, dword ptr [eax]
00444D63 FF51 34 call dword ptr [ecx+34]
00444D66 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444D6C 8D45 A8 lea eax, dword ptr [ebp-58]
00444D6F BA 02000000 mov edx, 2
00444D74 E8 17C50F00 call <sub_541290>
00444D79 66:C785 80FDFFF>mov word ptr [ebp-280], 0C8
00444D82 BA D1D45500 mov edx, 0055D4D1 ; ASCII "<P>"
00444D87 8D45 A4 lea eax, dword ptr [ebp-5C]
00444D8A E8 55C20F00 call <sub_540FE4>
00444D8F FF85 8CFDFFFF inc dword ptr [ebp-274]
00444D95 8B10 mov edx, dword ptr [eax]
00444D97 8BC3 mov eax, ebx
00444D99 8B08 mov ecx, dword ptr [eax]
00444D9B FF51 34 call dword ptr [ecx+34]
00444D9E FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444DA4 8D45 A4 lea eax, dword ptr [ebp-5C]
00444DA7 BA 02000000 mov edx, 2
00444DAC E8 DFC40F00 call <sub_541290>
00444DB1 66:C785 80FDFFF>mov word ptr [ebp-280], 0D4
00444DBA BA D5D45500 mov edx, 0055D4D5 ; ASCII "<OBJECT"
00444DBF 8D45 A0 lea eax, dword ptr [ebp-60]
00444DC2 E8 1DC20F00 call <sub_540FE4>
00444DC7 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444DCD 8B10 mov edx, dword ptr [eax]
00444DCF 8BC3 mov eax, ebx
00444DD1 8B08 mov ecx, dword ptr [eax]
00444DD3 FF51 34 call dword ptr [ecx+34]
00444DD6 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444DDC 8D45 A0 lea eax, dword ptr [ebp-60]
00444DDF BA 02000000 mov edx, 2
00444DE4 E8 A7C40F00 call <sub_541290>
00444DE9 66:C785 80FDFFF>mov word ptr [ebp-280], 0E0
00444DF2 BA DDD45500 mov edx, 0055D4DD ; ASCII " id=""pmlxflash"""
00444DF7 8D45 9C lea eax, dword ptr [ebp-64]
00444DFA E8 E5C10F00 call <sub_540FE4>
00444DFF FF85 8CFDFFFF inc dword ptr [ebp-274]
00444E05 8B10 mov edx, dword ptr [eax]
00444E07 8BC3 mov eax, ebx
00444E09 8B08 mov ecx, dword ptr [eax]
00444E0B FF51 34 call dword ptr [ecx+34]
00444E0E FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444E14 > 8D45 9C lea eax, dword ptr [ebp-64]
00444E17 BA 02000000 mov edx, 2
00444E1C E8 6FC40F00 call <sub_541290>
00444E21 66:C785 80FDFFF>mov word ptr [ebp-280], 0EC
00444E2A BA EED45500 mov edx, 0055D4EE ; ASCII " classid=""clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"""
00444E2F 8D45 98 lea eax, dword ptr [ebp-68]
00444E32 E8 ADC10F00 call <sub_540FE4>
00444E37 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444E3D 8B10 mov edx, dword ptr [eax]
00444E3F 8BC3 mov eax, ebx
00444E41 8B08 mov ecx, dword ptr [eax]
00444E43 FF51 34 call dword ptr [ecx+34]
00444E46 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444E4C 8D45 98 lea eax, dword ptr [ebp-68]
00444E4F BA 02000000 mov edx, 2
00444E54 E8 37C40F00 call <sub_541290>
00444E59 66:C785 80FDFFF>mov word ptr [ebp-280], 0F8
00444E62 8D45 90 lea eax, dword ptr [ebp-70]
00444E65 E8 EECAFBFF call <unknown_libname_55>
00444E6A 50 push eax
00444E6B FF85 8CFDFFFF inc dword ptr [ebp-274]
00444E71 8D45 94 lea eax, dword ptr [ebp-6C]
00444E74 8B95 88F8FFFF mov edx, dword ptr [ebp-778]
00444E7A E8 95C20F00 call <@System@WideString@$bctr$qq>
00444E7F 8BD0 mov edx, eax
00444E81 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444E87 B8 27D55500 mov eax, 0055D527 ; ASCII " width="
00444E8C 59 pop ecx
00444E8D E8 26C80F00 call <@System@$badd$qqrpxcrx17Sys>
00444E92 8BC3 mov eax, ebx
00444E94 8D55 90 lea edx, dword ptr [ebp-70]
00444E97 8B08 mov ecx, dword ptr [eax]
00444E99 8B12 mov edx, dword ptr [edx]
00444E9B FF51 34 call dword ptr [ecx+34]
00444E9E FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444EA4 8D45 90 lea eax, dword ptr [ebp-70]
00444EA7 BA 02000000 mov edx, 2
00444EAC E8 DFC30F00 call <sub_541290>
00444EB1 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444EB7 8D45 94 lea eax, dword ptr [ebp-6C]
00444EBA BA 02000000 mov edx, 2
00444EBF E8 CCC30F00 call <sub_541290>
00444EC4 66:C785 80FDFFF>mov word ptr [ebp-280], 104
00444ECD 8D45 88 lea eax, dword ptr [ebp-78]
00444ED0 > E8 83CAFBFF call <unknown_libname_55>
00444ED5 50 push eax
00444ED6 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444EDC > 8D45 8C lea eax, dword ptr [ebp-74]
00444EDF 8B95 8CF8FFFF mov edx, dword ptr [ebp-774]
00444EE5 E8 2AC20F00 call <@System@WideString@$bctr$qq>
00444EEA 8BD0 mov edx, eax
00444EEC FF85 8CFDFFFF inc dword ptr [ebp-274]
00444EF2 B8 32D55500 mov eax, 0055D532 ; ASCII " height="
00444EF7 59 pop ecx
00444EF8 E8 BBC70F00 call <@System@$badd$qqrpxcrx17Sys>
00444EFD 8BC3 mov eax, ebx
00444EFF 8D55 88 lea edx, dword ptr [ebp-78]
00444F02 8B08 mov ecx, dword ptr [eax]
00444F04 8B12 mov edx, dword ptr [edx]
00444F06 FF51 34 call dword ptr [ecx+34]
00444F09 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444F0F 8D45 88 lea eax, dword ptr [ebp-78]
00444F12 BA 02000000 mov edx, 2
00444F17 E8 74C30F00 call <sub_541290>
00444F1C FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444F22 8D45 8C lea eax, dword ptr [ebp-74]
00444F25 BA 02000000 mov edx, 2
00444F2A E8 61C30F00 call <sub_541290>
00444F2F 66:C785 80FDFFF>mov word ptr [ebp-280], 110
00444F38 BA 3ED55500 mov edx, 0055D53E ; ASCII " align=center"
00444F3D 8D45 84 lea eax, dword ptr [ebp-7C]
00444F40 E8 9FC00F00 call <sub_540FE4>
00444F45 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444F4B 8B10 mov edx, dword ptr [eax]
00444F4D 8BC3 mov eax, ebx
00444F4F 8B08 mov ecx, dword ptr [eax]
00444F51 FF51 34 call dword ptr [ecx+34]
00444F54 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444F5A 8D45 84 lea eax, dword ptr [ebp-7C]
00444F5D BA 02000000 mov edx, 2
00444F62 E8 29C30F00 call <sub_541290>
00444F67 66:C785 80FDFFF>mov word ptr [ebp-280], 11C
00444F70 BA 4FD55500 mov edx, 0055D54F ; ASCII " hspace=0"
00444F75 8D45 80 lea eax, dword ptr [ebp-80]
00444F78 E8 67C00F00 call <sub_540FE4>
00444F7D FF85 8CFDFFFF inc dword ptr [ebp-274]
00444F83 8B10 mov edx, dword ptr [eax]
00444F85 8BC3 mov eax, ebx
00444F87 8B08 mov ecx, dword ptr [eax]
00444F89 FF51 34 call dword ptr [ecx+34]
00444F8C FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444F92 8D45 80 lea eax, dword ptr [ebp-80]
00444F95 BA 02000000 mov edx, 2
00444F9A E8 F1C20F00 call <sub_541290>
00444F9F 66:C785 80FDFFF>mov word ptr [ebp-280], 128
00444FA8 BA 5CD55500 mov edx, 0055D55C ; ASCII " vspace=0"
00444FAD 8D85 7CFFFFFF lea eax, dword ptr [ebp-84]
00444FB3 E8 2CC00F00 call <sub_540FE4>
00444FB8 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444FBE 8B10 mov edx, dword ptr [eax]
00444FC0 8BC3 mov eax, ebx
00444FC2 8B08 mov ecx, dword ptr [eax]
00444FC4 FF51 34 call dword ptr [ecx+34]
00444FC7 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00444FCD 8D85 7CFFFFFF lea eax, dword ptr [ebp-84]
00444FD3 BA 02000000 mov edx, 2
00444FD8 > E8 B3C20F00 call <sub_541290>
00444FDD 66:C785 80FDFFF>mov word ptr [ebp-280], 134
00444FE6 BA 69D55500 mov edx, 0055D569
00444FEB 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
00444FF1 E8 EEBF0F00 call <sub_540FE4>
00444FF6 FF85 8CFDFFFF inc dword ptr [ebp-274]
00444FFC 8B10 mov edx, dword ptr [eax]
00444FFE 8BC3 mov eax, ebx
00445000 8B08 mov ecx, dword ptr [eax]
00445002 FF51 34 call dword ptr [ecx+34]
00445005 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044500B 8D85 78FFFFFF lea eax, dword ptr [ebp-88]
00445011 BA 02000000 mov edx, 2
00445016 E8 75C20F00 call <sub_541290>
0044501B 66:C785 80FDFFF>mov word ptr [ebp-280], 140
00445024 > 8D85 74FFFFFF lea eax, dword ptr [ebp-8C]
0044502A E8 29C9FBFF call <unknown_libname_55>
0044502F > 8BD0 mov edx, eax
00445031 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445037 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044503D 8B81 E0040000 mov eax, dword ptr [ecx+4E0]
00445043 E8 B0160B00 call <sub_4F66F8>
00445048 > 8D95 74FFFFFF lea edx, dword ptr [ebp-8C]
0044504E 8D85 70FFFFFF lea eax, dword ptr [ebp-90]
00445054 8B0A mov ecx, dword ptr [edx]
00445056 51 push ecx
00445057 E8 FCC8FBFF call <unknown_libname_55>
0044505C 8BD0 mov edx, eax
0044505E FF85 8CFDFFFF inc dword ptr [ebp-274]
00445064 58 pop eax
00445065 > E8 3A2D0E00 call <@Sysutils@ExtractFileName$q>
0044506A 8D95 70FFFFFF lea edx, dword ptr [ebp-90]
00445070 8D85 6CFFFFFF lea eax, dword ptr [ebp-94]
00445076 52 push edx
00445077 E8 DCC8FBFF call <unknown_libname_55>
0044507C 8BC8 mov ecx, eax
0044507E FF85 8CFDFFFF inc dword ptr [ebp-274]
00445084 B8 6BD55500 mov eax, 0055D56B ; ASCII "<param name= ""Movie"" value="""
00445089 > 5A pop edx
0044508A E8 29C60F00 call <@System@$badd$qqrpxcrx17Sys>
0044508F 8D8D 6CFFFFFF lea ecx, dword ptr [ebp-94]
00445095 8D85 64FFFFFF lea eax, dword ptr [ebp-9C]
0044509B 51 push ecx
0044509C E8 B7C8FBFF call <unknown_libname_55>
004450A1 50 push eax
004450A2 > FF85 8CFDFFFF inc dword ptr [ebp-274]
004450A8 > BA 88D55500 mov edx, 0055D588 ; ASCII """>"
004450AD 8D85 68FFFFFF lea eax, dword ptr [ebp-98]
004450B3 E8 2CBF0F00 call <sub_540FE4>
004450B8 FF85 8CFDFFFF inc dword ptr [ebp-274]
004450BE 8D95 68FFFFFF lea edx, dword ptr [ebp-98]
004450C4 59 pop ecx
004450C5 58 pop eax
004450C6 E8 1DC20F00 call <@System@AnsiString@$badd$xq>
004450CB 8BC3 mov eax, ebx
004450CD > 8D95 64FFFFFF lea edx, dword ptr [ebp-9C]
004450D3 8B08 mov ecx, dword ptr [eax]
004450D5 > 8B12 mov edx, dword ptr [edx]
004450D7 FF51 34 call dword ptr [ecx+34]
004450DA FF8D 8CFDFFFF dec dword ptr [ebp-274]
004450E0 8D85 64FFFFFF lea eax, dword ptr [ebp-9C]
004450E6 BA 02000000 mov edx, 2
004450EB E8 A0C10F00 call <sub_541290>
004450F0 > FF8D 8CFDFFFF dec dword ptr [ebp-274]
004450F6 8D85 68FFFFFF lea eax, dword ptr [ebp-98]
004450FC > BA 02000000 mov edx, 2
00445101 E8 8AC10F00 call <sub_541290>
00445106 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044510C 8D85 6CFFFFFF lea eax, dword ptr [ebp-94]
00445112 BA 02000000 mov edx, 2
00445117 E8 74C10F00 call <sub_541290>
0044511C FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445122 8D85 70FFFFFF lea eax, dword ptr [ebp-90]
00445128 BA 02000000 mov edx, 2
0044512D E8 5EC10F00 call <sub_541290>
00445132 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445138 8D85 74FFFFFF lea eax, dword ptr [ebp-8C]
0044513E BA 02000000 mov edx, 2
00445143 E8 48C10F00 call <sub_541290>
00445148 66:C785 80FDFFF>mov word ptr [ebp-280], 14C
00445151 BA 8BD55500 mov edx, 0055D58B ; ASCII "</OBJECT>"
00445156 8D85 60FFFFFF lea eax, dword ptr [ebp-A0]
0044515C E8 83BE0F00 call <sub_540FE4>
00445161 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445167 8B10 mov edx, dword ptr [eax]
00445169 8BC3 mov eax, ebx
0044516B 8B08 mov ecx, dword ptr [eax]
0044516D FF51 34 call dword ptr [ecx+34]
00445170 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445176 8D85 60FFFFFF lea eax, dword ptr [ebp-A0]
0044517C BA 02000000 mov edx, 2
00445181 E8 0AC10F00 call <sub_541290>
00445186 66:C785 80FDFFF>mov word ptr [ebp-280], 158
0044518F BA 95D55500 mov edx, 0055D595 ; ASCII "</HTML>"
00445194 8D85 5CFFFFFF lea eax, dword ptr [ebp-A4]
0044519A E8 45BE0F00 call <sub_540FE4>
0044519F FF85 8CFDFFFF inc dword ptr [ebp-274]
004451A5 8B10 mov edx, dword ptr [eax]
004451A7 8BC3 mov eax, ebx
004451A9 8B08 mov ecx, dword ptr [eax]
004451AB FF51 34 call dword ptr [ecx+34]
004451AE FF8D 8CFDFFFF dec dword ptr [ebp-274]
004451B4 8D85 5CFFFFFF lea eax, dword ptr [ebp-A4]
004451BA BA 02000000 mov edx, 2
004451BF E8 CCC00F00 call <sub_541290>
004451C4 66:C785 80FDFFF>mov word ptr [ebp-280], 164
004451CD 8D95 ACF8FFFF lea edx, dword ptr [ebp-754]
004451D3 8D85 58FFFFFF lea eax, dword ptr [ebp-A8]
004451D9 E8 06BE0F00 call <sub_540FE4>
004451DE FF85 8CFDFFFF inc dword ptr [ebp-274]
004451E4 8B00 mov eax, dword ptr [eax]
004451E6 E8 D5280E00 call <@Sysutils@FileExists$qqrx17>
004451EB 3C 01 cmp al, 1
004451ED 8D85 58FFFFFF lea eax, dword ptr [ebp-A8]
004451F3 0F94C2 sete dl
004451F6 83E2 01 and edx, 1
004451F9 52 push edx
004451FA BA 02000000 mov edx, 2
004451FF FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445205 E8 86C00F00 call <sub_541290>
0044520A 59 pop ecx
0044520B 84C9 test cl, cl
0044520D 0F84 EF000000 je <loc_445302>
00445213 66:C785 80FDFFF>mov word ptr [ebp-280], 170
0044521C 8D85 4CFFFFFF lea eax, dword ptr [ebp-B4]
00445222 E8 31C7FBFF call <unknown_libname_55>
00445227 50 push eax
00445228 > FF85 8CFDFFFF inc dword ptr [ebp-274]
0044522E BA 9DD55500 mov edx, 0055D59D
00445233 8D85 50FFFFFF lea eax, dword ptr [ebp-B0]
00445239 E8 A6BD0F00 call <sub_540FE4>
0044523E FF85 8CFDFFFF inc dword ptr [ebp-274]
00445244 8D95 50FFFFFF lea edx, dword ptr [ebp-B0]
0044524A 52 push edx
0044524B 8D95 ACF8FFFF lea edx, dword ptr [ebp-754]
00445251 8D85 54FFFFFF lea eax, dword ptr [ebp-AC]
00445257 E8 88BD0F00 call <sub_540FE4>
0044525C FF85 8CFDFFFF inc dword ptr [ebp-274]
00445262 5A pop edx
00445263 59 pop ecx
00445264 E8 7FC00F00 call <@System@AnsiString@$badd$xq>
00445269 8D95 4CFFFFFF lea edx, dword ptr [ebp-B4]
0044526F 8D45 FC lea eax, dword ptr [ebp-4]
00445272 E8 49C00F00 call <sub_5412C0>
00445277 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044527D 8D85 4CFFFFFF lea eax, dword ptr [ebp-B4]
00445283 BA 02000000 mov edx, 2
00445288 E8 03C00F00 call <sub_541290>
0044528D FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445293 8D85 50FFFFFF lea eax, dword ptr [ebp-B0]
00445299 BA 02000000 mov edx, 2
0044529E E8 EDBF0F00 call <sub_541290>
004452A3 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004452A9 8D85 54FFFFFF lea eax, dword ptr [ebp-AC]
004452AF BA 02000000 mov edx, 2
004452B4 E8 D7BF0F00 call <sub_541290>
004452B9 6A 01 push 1
004452BB 68 B5D55500 push 0055D5B5
004452C0 8D45 FC lea eax, dword ptr [ebp-4]
004452C3 E8 E4CDFBFF call <sub_4020AC>
004452C8 50 push eax
004452C9 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
004452CF E8 24DF0B00 call <@Controls@TWinControl@GetHa>
004452D4 50 push eax
004452D5 E8 C40D1100 call <MessageBoxA> ; jmp 到 USER32.MessageBoxA
004452DA 48 dec eax
004452DB 74 25 je short <loc_445302>
004452DD FF8D 8CFDFFFF dec dword ptr [ebp-274]
004452E3 8D45 FC lea eax, dword ptr [ebp-4]
004452E6 BA 02000000 mov edx, 2
004452EB E8 A0BF0F00 call <sub_541290>
004452F0 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
004452F6 64:890D 0000000>mov dword ptr fs:[0], ecx
004452FD E9 0E370000 jmp <loc_448A10>
00445302 > 66:C785 80FDFFF>mov word ptr [ebp-280], 17C
0044530B 66:C785 80FDFFF>mov word ptr [ebp-280], 188
00445314 8D95 ACF8FFFF lea edx, dword ptr [ebp-754]
0044531A 8D85 48FFFFFF lea eax, dword ptr [ebp-B8]
00445320 E8 BFBC0F00 call <sub_540FE4>
00445325 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044532B 8B10 mov edx, dword ptr [eax]
0044532D 8BC3 mov eax, ebx
0044532F 8B08 mov ecx, dword ptr [eax]
00445331 FF51 64 call dword ptr [ecx+64]
00445334 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044533A 8D85 48FFFFFF lea eax, dword ptr [ebp-B8]
00445340 BA 02000000 mov edx, 2
00445345 E8 46BF0F00 call <sub_541290>
0044534A 66:C785 80FDFFF>mov word ptr [ebp-280], 14
00445353 E9 E0000000 jmp <loc_445438>
00445358 > 66:C785 80FDFFF>mov word ptr [ebp-280], 194
00445361 8D85 3CFFFFFF lea eax, dword ptr [ebp-C4]
00445367 E8 ECC5FBFF call <unknown_libname_55>
0044536C 50 push eax
0044536D FF85 8CFDFFFF inc dword ptr [ebp-274]
00445373 BA C2D55500 mov edx, 0055D5C2
00445378 8D85 40FFFFFF lea eax, dword ptr [ebp-C0]
0044537E E8 61BC0F00 call <sub_540FE4>
00445383 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445389 8D95 40FFFFFF lea edx, dword ptr [ebp-C0]
0044538F 52 push edx
00445390 8D95 ACF8FFFF lea edx, dword ptr [ebp-754]
00445396 8D85 44FFFFFF lea eax, dword ptr [ebp-BC]
0044539C > E8 43BC0F00 call <sub_540FE4>
004453A1 FF85 8CFDFFFF inc dword ptr [ebp-274]
004453A7 5A pop edx
004453A8 59 pop ecx
004453A9 E8 3ABF0F00 call <@System@AnsiString@$badd$xq>
004453AE 8D85 3CFFFFFF lea eax, dword ptr [ebp-C4]
004453B4 8B00 mov eax, dword ptr [eax]
004453B6 E8 E9280B00 call <@Dialogs@ShowMessage$qqrx17>
004453BB FF8D 8CFDFFFF dec dword ptr [ebp-274]
004453C1 8D85 3CFFFFFF lea eax, dword ptr [ebp-C4]
004453C7 BA 02000000 mov edx, 2
004453CC > E8 BFBE0F00 call <sub_541290>
004453D1 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004453D7 8D85 40FFFFFF lea eax, dword ptr [ebp-C0]
004453DD BA 02000000 mov edx, 2
004453E2 E8 A9BE0F00 call <sub_541290>
004453E7 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004453ED 8D85 44FFFFFF lea eax, dword ptr [ebp-BC]
004453F3 BA 02000000 mov edx, 2
004453F8 E8 93BE0F00 call <sub_541290>
004453FD FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445403 8D45 FC lea eax, dword ptr [ebp-4]
00445406 BA 02000000 mov edx, 2
0044540B E8 80BE0F00 call <sub_541290>
00445410 33C9 xor ecx, ecx
00445412 898D 8CFDFFFF mov dword ptr [ebp-274], ecx
00445418 8D85 70FDFFFF lea eax, dword ptr [ebp-290]
0044541E 50 push eax
0044541F E8 67930F00 call <__Return_unwind>
00445424 > 59 pop ecx
00445425 E9 E6350000 jmp <loc_448A10>
0044542A 66:C785 80FDFFF>mov word ptr [ebp-280], 184
00445433 E8 9E8C0F00 call <@_CatchCleanup$qv>
00445438 > 33D2 xor edx, edx
0044543A 8995 38FDFFFF mov dword ptr [ebp-2C8], edx
00445440 66:C785 80FDFFF>mov word ptr [ebp-280], 14
00445449 66:C785 80FDFFF>mov word ptr [ebp-280], 1A0
00445452 8D45 F8 lea eax, dword ptr [ebp-8]
00445455 E8 FEC4FBFF call <unknown_libname_55>
0044545A FF85 8CFDFFFF inc dword ptr [ebp-274]
00445460 66:C785 80FDFFF>mov word ptr [ebp-280], 14
00445469 6A 32 push 32
0044546B E8 30CB0E00 call <@$bnwa$qui>
00445470 59 pop ecx
00445471 8985 44FDFFFF mov dword ptr [ebp-2BC], eax
00445477 6A 32 push 32
00445479 E8 22CB0E00 call <@$bnwa$qui>
0044547E 59 pop ecx
0044547F 8985 40FDFFFF mov dword ptr [ebp-2C0], eax
00445485 6A 32 push 32
00445487 E8 14CB0E00 call <@$bnwa$qui>
0044548C > 59 pop ecx
0044548D 8985 3CFDFFFF mov dword ptr [ebp-2C4], eax
00445493 6A 32 push 32
00445495 6A 00 push 0
00445497 8B95 44FDFFFF mov edx, dword ptr [ebp-2BC]
0044549D 52 push edx
0044549E E8 01D30E00 call <_memset>
004454A3 83C4 0C add esp, 0C
004454A6 6A 32 push 32
004454A8 6A 00 push 0
004454AA 8B8D 40FDFFFF mov ecx, dword ptr [ebp-2C0]
004454B0 51 push ecx
004454B1 E8 EED20E00 call <_memset>
004454B6 83C4 0C add esp, 0C
004454B9 6A 32 push 32
004454BB 6A 00 push 0
004454BD 8B85 3CFDFFFF mov eax, dword ptr [ebp-2C4]
004454C3 50 push eax
004454C4 E8 DBD20E00 call <_memset>
004454C9 83C4 0C add esp, 0C
004454CC 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
004454D2 8B8A F8070000 mov ecx, dword ptr [edx+7F8]
004454D8 8B41 04 mov eax, dword ptr [ecx+4]
004454DB 8985 34FDFFFF mov dword ptr [ebp-2CC], eax
004454E1 8B95 34FDFFFF mov edx, dword ptr [ebp-2CC]
004454E7 8B0A mov ecx, dword ptr [edx]
004454E9 898D 30FDFFFF mov dword ptr [ebp-2D0], ecx
004454EF 83BD 30FDFFFF 0>cmp dword ptr [ebp-2D0], 0
004454F6 0F84 AE000000 je <loc_4455AA>
004454FC 6A 32 push 32
004454FE 8B85 30FDFFFF mov eax, dword ptr [ebp-2D0]
00445504 > 05 27F8FFFF add eax, -7D9
00445509 50 push eax
0044550A 8B95 40FDFFFF mov edx, dword ptr [ebp-2C0]
00445510 52 push edx
00445511 E8 1ED20E00 call <_memcpy>
00445516 83C4 0C add esp, 0C
00445519 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044551F 8B81 F8070000 mov eax, dword ptr [ecx+7F8]
00445525 8B50 0C mov edx, dword ptr [eax+C]
00445528 8995 34FDFFFF mov dword ptr [ebp-2CC], edx
0044552E 8B8D 34FDFFFF mov ecx, dword ptr [ebp-2CC]
00445534 8B01 mov eax, dword ptr [ecx]
00445536 8985 30FDFFFF mov dword ptr [ebp-2D0], eax
0044553C 6A 32 push 32
0044553E 8B95 30FDFFFF mov edx, dword ptr [ebp-2D0]
00445544 81C2 28F8FFFF add edx, -7D8
0044554A 52 push edx
0044554B 8B8D 44FDFFFF mov ecx, dword ptr [ebp-2BC]
00445551 51 push ecx
00445552 E8 DDD10E00 call <_memcpy>
00445557 83C4 0C add esp, 0C
0044555A 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00445560 8B90 F8070000 mov edx, dword ptr [eax+7F8]
00445566 8B4A 10 mov ecx, dword ptr [edx+10]
00445569 898D 34FDFFFF mov dword ptr [ebp-2CC], ecx
0044556F 8B85 34FDFFFF mov eax, dword ptr [ebp-2CC]
00445575 8B10 mov edx, dword ptr [eax]
00445577 8995 30FDFFFF mov dword ptr [ebp-2D0], edx
0044557D 6A 32 push 32
0044557F 8B8D 30FDFFFF mov ecx, dword ptr [ebp-2D0]
00445585 81C1 264E0000 add ecx, 4E26
0044558B 51 push ecx
0044558C > 8B85 3CFDFFFF mov eax, dword ptr [ebp-2C4]
00445592 50 push eax
00445593 E8 9CD10E00 call <_memcpy>
00445598 83C4 0C add esp, 0C
0044559B 8B95 3CFDFFFF mov edx, dword ptr [ebp-2C4]
004455A1 83C2 0C add edx, 0C
004455A4 8995 2CFDFFFF mov dword ptr [ebp-2D4], edx
004455AA > 66:C785 80FDFFF>mov word ptr [ebp-280], 1AC
004455B3 8D45 F4 lea eax, dword ptr [ebp-C]
004455B6 E8 9DC3FBFF call <unknown_libname_55>
004455BB FF85 8CFDFFFF inc dword ptr [ebp-274]
004455C1 B2 01 mov dl, 1
004455C3 66:C785 80FDFFF>mov word ptr [ebp-280], 14
004455CC A1 98894D00 mov eax, dword ptr [<off_4D8998>>
004455D1 E8 8AAF0900 call <@Graphics@TIcon@$bctr$qqrv>
004455D6 8985 FCFCFFFF mov dword ptr [ebp-304], eax
004455DC 68 36080000 push 836
004455E1 E8 BAC90E00 call <@$bnwa$qui>
004455E6 59 pop ecx
004455E7 8985 F0FCFFFF mov dword ptr [ebp-310], eax
004455ED 33D2 xor edx, edx
004455EF 8995 BCFCFFFF mov dword ptr [ebp-344], edx
004455F5 6A 2C push 2C
004455F7 6A 00 push 0
004455F9 8D8D 6CEFFFFF lea ecx, dword ptr [ebp-1094]
004455FF 51 push ecx
00445600 E8 9FD10E00 call <_memset>
00445605 83C4 0C add esp, 0C
00445608 8D85 98EFFFFF lea eax, dword ptr [ebp-1068]
0044560E 68 B4000000 push 0B4
00445613 6A 00 push 0
00445615 50 push eax
00445616 E8 89D10E00 call <_memset>
0044561B 83C4 0C add esp, 0C
0044561E 6A 40 push 40
00445620 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
00445626 8B8A D4150000 mov ecx, dword ptr [edx+15D4]
0044562C > B2 01 mov dl, 1
0044562E A1 048F5100 mov eax, dword ptr [<off_518F04>>
00445633 E8 346F0D00 call <@Classes@TFileStream@$bctr$>
00445638 8985 B8FCFFFF mov dword ptr [ebp-348], eax
0044563E 66:C785 80FDFFF>mov word ptr [ebp-280], 1B8
00445647 8D85 38FFFFFF lea eax, dword ptr [ebp-C8]
0044564D E8 06C3FBFF call <unknown_libname_55>
00445652 8BD0 mov edx, eax
00445654 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044565A 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00445660 8B81 7C030000 mov eax, dword ptr [ecx+37C]
00445666 E8 697A0B00 call <@TControl@GetText$qqrv>
0044566B 8D95 38FFFFFF lea edx, dword ptr [ebp-C8]
00445671 8D85 30FFFFFF lea eax, dword ptr [ebp-D0]
00445677 52 push edx
00445678 E8 DBC2FBFF call <unknown_libname_55>
0044567D 50 push eax
0044567E FF85 8CFDFFFF inc dword ptr [ebp-274]
00445684 BA CCD55500 mov edx, 0055D5CC ; ASCII "lsflash.tmp"
00445689 8D85 34FFFFFF lea eax, dword ptr [ebp-CC]
0044568F E8 50B90F00 call <sub_540FE4>
00445694 > FF85 8CFDFFFF inc dword ptr [ebp-274]
0044569A 8D95 34FFFFFF lea edx, dword ptr [ebp-CC]
004456A0 59 pop ecx
004456A1 58 pop eax
004456A2 E8 41BC0F00 call <@System@AnsiString@$badd$xq>
004456A7 8D85 30FFFFFF lea eax, dword ptr [ebp-D0]
004456AD 8B00 mov eax, dword ptr [eax]
004456AF E8 28B90F00 call <j_unknown_libname_576>
004456B4 > FF8D 8CFDFFFF dec dword ptr [ebp-274]
004456BA 8D85 30FFFFFF lea eax, dword ptr [ebp-D0]
004456C0 BA 02000000 mov edx, 2
004456C5 E8 C6BB0F00 call <sub_541290>
004456CA FF8D 8CFDFFFF dec dword ptr [ebp-274]
004456D0 8D85 34FFFFFF lea eax, dword ptr [ebp-CC]
004456D6 BA 02000000 mov edx, 2
004456DB E8 B0BB0F00 call <sub_541290>
004456E0 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004456E6 8D85 38FFFFFF lea eax, dword ptr [ebp-C8]
004456EC BA 02000000 mov edx, 2
004456F1 E8 9ABB0F00 call <sub_541290>
004456F6 68 FFFF0000 push 0FFFF
004456FB 66:C785 80FDFFF>mov word ptr [ebp-280], 1C4
00445704 8D85 2CFFFFFF lea eax, dword ptr [ebp-D4]
0044570A E8 49C2FBFF call <unknown_libname_55>
0044570F 8BD0 mov edx, eax
00445711 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445717 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044571D 8B81 7C030000 mov eax, dword ptr [ecx+37C]
00445723 E8 AC790B00 call <@TControl@GetText$qqrv>
00445728 8D95 2CFFFFFF lea edx, dword ptr [ebp-D4]
0044572E 8D85 24FFFFFF lea eax, dword ptr [ebp-DC]
00445734 52 push edx
00445735 E8 1EC2FBFF call <unknown_libname_55>
0044573A 50 push eax
0044573B FF85 8CFDFFFF inc dword ptr [ebp-274]
00445741 BA D8D55500 mov edx, 0055D5D8 ; ASCII "lsflash.tmp"
00445746 8D85 28FFFFFF lea eax, dword ptr [ebp-D8]
0044574C E8 93B80F00 call <sub_540FE4>
00445751 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445757 8D95 28FFFFFF lea edx, dword ptr [ebp-D8]
0044575D 59 pop ecx
0044575E 58 pop eax
0044575F E8 84BB0F00 call <@System@AnsiString@$badd$xq>
00445764 > 8D8D 24FFFFFF lea ecx, dword ptr [ebp-DC]
0044576A 8B09 mov ecx, dword ptr [ecx]
0044576C B2 01 mov dl, 1
0044576E A1 048F5100 mov eax, dword ptr [<off_518F04>>
00445773 E8 F46D0D00 call <@Classes@TFileStream@$bctr$>
00445778 8985 B4FCFFFF mov dword ptr [ebp-34C], eax
0044577E FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445784 > 8D85 24FFFFFF lea eax, dword ptr [ebp-DC]
0044578A BA 02000000 mov edx, 2
0044578F E8 FCBA0F00 call <sub_541290>
00445794 > FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044579A 8D85 28FFFFFF lea eax, dword ptr [ebp-D8]
004457A0 BA 02000000 mov edx, 2
004457A5 E8 E6BA0F00 call <sub_541290>
004457AA FF8D 8CFDFFFF dec dword ptr [ebp-274]
004457B0 8D85 2CFFFFFF lea eax, dword ptr [ebp-D4]
004457B6 BA 02000000 mov edx, 2
004457BB E8 D0BA0F00 call <sub_541290>
004457C0 66:C785 80FDFFF>mov word ptr [ebp-280], 14
004457C9 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004457CF BA 20FFFFFF mov edx, -0E0
004457D4 66:B9 0200 mov cx, 2
004457D8 8B18 mov ebx, dword ptr [eax]
004457DA FF53 0C call dword ptr [ebx+C]
004457DD 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004457E3 8D95 98EFFFFF lea edx, dword ptr [ebp-1068]
004457E9 B9 B4000000 mov ecx, 0B4
004457EE 8B18 mov ebx, dword ptr [eax]
004457F0 FF53 04 call dword ptr [ebx+4]
004457F3 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004457F9 BA D4FFFFFF mov edx, -2C
004457FE 66:B9 0200 mov cx, 2
00445802 8B18 mov ebx, dword ptr [eax]
00445804 FF53 0C call dword ptr [ebx+C]
00445807 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
0044580D 8D95 6CEFFFFF lea edx, dword ptr [ebp-1094]
00445813 B9 2C000000 mov ecx, 2C
00445818 8B18 mov ebx, dword ptr [eax]
0044581A FF53 04 call dword ptr [ebx+4]
0044581D 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00445823 50 push eax
00445824 E8 AFC6FBFF call <sub_401ED8>
00445829 59 pop ecx
0044582A 8D95 0CFDFFFF lea edx, dword ptr [ebp-2F4]
00445830 8995 14FDFFFF mov dword ptr [ebp-2EC], edx
00445836 83BD F4EFFFFF 0>cmp dword ptr [ebp-100C], 1
0044583D 0F85 51040000 jnz <loc_445C94>
00445843 C785 60FDFFFF 1>mov dword ptr [ebp-2A0], -0E4
0044584D 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00445853 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
00445859 66:B9 0200 mov cx, 2
0044585D 8B18 mov ebx, dword ptr [eax]
0044585F FF53 0C call dword ptr [ebx+C]
00445862 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00445868 8D95 C4FCFFFF lea edx, dword ptr [ebp-33C]
0044586E B9 04000000 mov ecx, 4
00445873 8B18 mov ebx, dword ptr [eax]
00445875 FF53 04 call dword ptr [ebx+4]
00445878 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
0044587E 2B85 C4FCFFFF sub eax, dword ptr [ebp-33C]
00445884 66:B9 0200 mov cx, 2
00445888 83E8 04 sub eax, 4
0044588B 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
00445891 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00445897 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
0044589D 8B18 mov ebx, dword ptr [eax]
0044589F FF53 0C call dword ptr [ebx+C]
004458A2 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004458A8 8D95 C4FCFFFF lea edx, dword ptr [ebp-33C]
004458AE B9 04000000 mov ecx, 4
004458B3 8B18 mov ebx, dword ptr [eax]
004458B5 FF53 04 call dword ptr [ebx+4]
004458B8 8B85 C4FCFFFF mov eax, dword ptr [ebp-33C]
004458BE 2985 60FDFFFF sub dword ptr [ebp-2A0], eax
004458C4 8B95 C4FCFFFF mov edx, dword ptr [ebp-33C]
004458CA 42 inc edx
004458CB 52 push edx
004458CC > E8 CFC60E00 call <@$bnwa$qui>
004458D1 59 pop ecx
004458D2 8BD8 mov ebx, eax
004458D4 B2 01 mov dl, 1
004458D6 A1 308D5100 mov eax, dword ptr [<off_518D30>>
004458DB E8 DC54FCFF call <sub_40ADBC>
004458E0 8985 B0FCFFFF mov dword ptr [ebp-350], eax
004458E6 66:B9 0200 mov cx, 2
004458EA 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004458F0 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
004458F6 8B30 mov esi, dword ptr [eax]
004458F8 FF56 0C call dword ptr [esi+C]
004458FB 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00445901 8B8D C4FCFFFF mov ecx, dword ptr [ebp-33C]
00445907 8BD3 mov edx, ebx
00445909 8B30 mov esi, dword ptr [eax]
0044590B FF56 04 call dword ptr [esi+4]
0044590E 8B85 C4FCFFFF mov eax, dword ptr [ebp-33C]
00445914 > 8BD3 mov edx, ebx
00445916 C60403 00 mov byte ptr [ebx+eax], 0
0044591A 8D85 20FFFFFF lea eax, dword ptr [ebp-E0]
00445920 66:C785 80FDFFF>mov word ptr [ebp-280], 1D0
00445929 E8 B6B60F00 call <sub_540FE4>
0044592E FF85 8CFDFFFF inc dword ptr [ebp-274]
00445934 > 8B10 mov edx, dword ptr [eax]
00445936 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
0044593C 8B08 mov ecx, dword ptr [eax]
0044593E FF51 2C call dword ptr [ecx+2C]
00445941 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445947 8D85 20FFFFFF lea eax, dword ptr [ebp-E0]
0044594D BA 02000000 mov edx, 2
00445952 E8 39B90F00 call <sub_541290>
00445957 53 push ebx
00445958 E8 6BC40E00 call <__rtl_close>
0044595D 59 pop ecx
0044595E 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
00445964 8B10 mov edx, dword ptr [eax]
00445966 FF52 14 call dword ptr [edx+14]
00445969 85C0 test eax, eax
0044596B 79 03 jns short <loc_445970>
0044596D 83C0 07 add eax, 7
00445970 > C1F8 03 sar eax, 3
00445973 8985 00FDFFFF mov dword ptr [ebp-300], eax
00445979 8B8D 00FDFFFF mov ecx, dword ptr [ebp-300]
0044597F C1E1 05 shl ecx, 5
00445982 51 push ecx
00445983 E8 18C60E00 call <@$bnwa$qui>
00445988 59 pop ecx
00445989 8985 04FDFFFF mov dword ptr [ebp-2FC], eax
0044598F 33C0 xor eax, eax
00445991 8985 D0FCFFFF mov dword ptr [ebp-330], eax
00445997 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
0044599D 3B95 00FDFFFF cmp edx, dword ptr [ebp-300]
004459A3 0F8D A6020000 jge <loc_445C4F>
004459A9 > 66:C785 80FDFFF>mov word ptr [ebp-280], 1DC
004459B2 8D85 1CFFFFFF lea eax, dword ptr [ebp-E4]
004459B8 E8 9BBFFBFF call <unknown_libname_55>
004459BD FF85 8CFDFFFF inc dword ptr [ebp-274]
004459C3 8BC8 mov ecx, eax
004459C5 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
004459CB 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
004459D1 C1E2 03 shl edx, 3
004459D4 8B18 mov ebx, dword ptr [eax]
004459D6 FF53 0C call dword ptr [ebx+C]
004459D9 8D85 1CFFFFFF lea eax, dword ptr [ebp-E4]
004459DF E8 BCBB0F00 call <@System@AnsiString@ToInt$xq>
004459E4 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
004459EA C1E2 05 shl edx, 5
004459ED 8B8D 04FDFFFF mov ecx, dword ptr [ebp-2FC]
004459F3 890411 mov dword ptr [ecx+edx], eax
004459F6 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004459FC > 8D85 1CFFFFFF lea eax, dword ptr [ebp-E4]
00445A02 BA 02000000 mov edx, 2
00445A07 E8 84B80F00 call <sub_541290>
00445A0C > 66:C785 80FDFFF>mov word ptr [ebp-280], 1E8
00445A15 8D85 18FFFFFF lea eax, dword ptr [ebp-E8]
00445A1B E8 38BFFBFF call <unknown_libname_55>
00445A20 > FF85 8CFDFFFF inc dword ptr [ebp-274]
00445A26 8BC8 mov ecx, eax
00445A28 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
00445A2E 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445A34 C1E2 03 shl edx, 3
00445A37 42 inc edx
00445A38 8B18 mov ebx, dword ptr [eax]
00445A3A FF53 0C call dword ptr [ebx+C]
00445A3D 8D85 18FFFFFF lea eax, dword ptr [ebp-E8]
00445A43 E8 58BB0F00 call <@System@AnsiString@ToInt$xq>
00445A48 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445A4E C1E2 05 shl edx, 5
00445A51 8B8D 04FDFFFF mov ecx, dword ptr [ebp-2FC]
00445A57 894411 04 mov dword ptr [ecx+edx+4], eax
00445A5B FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445A61 8D85 18FFFFFF lea eax, dword ptr [ebp-E8]
00445A67 BA 02000000 mov edx, 2
00445A6C E8 1FB80F00 call <sub_541290>
00445A71 66:C785 80FDFFF>mov word ptr [ebp-280], 1F4
00445A7A 8D85 14FFFFFF lea eax, dword ptr [ebp-EC]
00445A80 E8 D3BEFBFF call <unknown_libname_55>
00445A85 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445A8B 8BC8 mov ecx, eax
00445A8D 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
00445A93 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445A99 C1E2 03 shl edx, 3
00445A9C > 83C2 02 add edx, 2
00445A9F 8B18 mov ebx, dword ptr [eax]
00445AA1 FF53 0C call dword ptr [ebx+C]
00445AA4 8D85 14FFFFFF lea eax, dword ptr [ebp-EC]
00445AAA E8 F1BA0F00 call <@System@AnsiString@ToInt$xq>
00445AAF 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445AB5 C1E2 05 shl edx, 5
00445AB8 8B8D 04FDFFFF mov ecx, dword ptr [ebp-2FC]
00445ABE 894411 08 mov dword ptr [ecx+edx+8], eax
00445AC2 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445AC8 8D85 14FFFFFF lea eax, dword ptr [ebp-EC]
00445ACE BA 02000000 mov edx, 2
00445AD3 E8 B8B70F00 call <sub_541290>
00445AD8 66:C785 80FDFFF>mov word ptr [ebp-280], 200
00445AE1 8D85 10FFFFFF lea eax, dword ptr [ebp-F0]
00445AE7 E8 6CBEFBFF call <unknown_libname_55>
00445AEC FF85 8CFDFFFF inc dword ptr [ebp-274]
00445AF2 8BC8 mov ecx, eax
00445AF4 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
00445AFA 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445B00 C1E2 03 shl edx, 3
00445B03 83C2 03 add edx, 3
00445B06 8B18 mov ebx, dword ptr [eax]
00445B08 > FF53 0C call dword ptr [ebx+C]
00445B0B 8D85 10FFFFFF lea eax, dword ptr [ebp-F0]
00445B11 E8 8ABA0F00 call <@System@AnsiString@ToInt$xq>
00445B16 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445B1C > C1E2 05 shl edx, 5
00445B1F 8B8D 04FDFFFF mov ecx, dword ptr [ebp-2FC]
00445B25 894411 0C mov dword ptr [ecx+edx+C], eax
00445B29 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445B2F 8D85 10FFFFFF lea eax, dword ptr [ebp-F0]
00445B35 BA 02000000 mov edx, 2
00445B3A E8 51B70F00 call <sub_541290>
00445B3F 66:C785 80FDFFF>mov word ptr [ebp-280], 20C
00445B48 8D85 0CFFFFFF lea eax, dword ptr [ebp-F4]
00445B4E E8 05BEFBFF call <unknown_libname_55>
00445B53 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445B59 8BC8 mov ecx, eax
00445B5B 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
00445B61 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445B67 C1E2 03 shl edx, 3
00445B6A 83C2 04 add edx, 4
00445B6D 8B18 mov ebx, dword ptr [eax]
00445B6F FF53 0C call dword ptr [ebx+C]
00445B72 8D85 0CFFFFFF lea eax, dword ptr [ebp-F4]
00445B78 E8 23BA0F00 call <@System@AnsiString@ToInt$xq>
00445B7D 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445B83 C1E2 05 shl edx, 5
00445B86 8B8D 04FDFFFF mov ecx, dword ptr [ebp-2FC]
00445B8C 894411 10 mov dword ptr [ecx+edx+10], eax
00445B90 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445B96 8D85 0CFFFFFF lea eax, dword ptr [ebp-F4]
00445B9C BA 02000000 mov edx, 2
00445BA1 E8 EAB60F00 call <sub_541290>
00445BA6 66:C785 80FDFFF>mov word ptr [ebp-280], 218
00445BAF > 8D85 08FFFFFF lea eax, dword ptr [ebp-F8]
00445BB5 E8 9EBDFBFF call <unknown_libname_55>
00445BBA FF85 8CFDFFFF inc dword ptr [ebp-274]
00445BC0 8BC8 mov ecx, eax
00445BC2 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
00445BC8 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445BCE C1E2 03 shl edx, 3
00445BD1 83C2 05 add edx, 5
00445BD4 8B18 mov ebx, dword ptr [eax]
00445BD6 FF53 0C call dword ptr [ebx+C]
00445BD9 8D85 08FFFFFF lea eax, dword ptr [ebp-F8]
00445BDF E8 BCB90F00 call <@System@AnsiString@ToInt$xq>
00445BE4 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445BEA C1E2 05 shl edx, 5
00445BED 8B8D 04FDFFFF mov ecx, dword ptr [ebp-2FC]
00445BF3 894411 14 mov dword ptr [ecx+edx+14], eax
00445BF7 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445BFD 8D85 08FFFFFF lea eax, dword ptr [ebp-F8]
00445C03 BA 02000000 mov edx, 2
00445C08 E8 83B60F00 call <sub_541290>
00445C0D 8B8D D0FCFFFF mov ecx, dword ptr [ebp-330]
00445C13 C1E1 05 shl ecx, 5
00445C16 8B85 04FDFFFF mov eax, dword ptr [ebp-2FC]
00445C1C 33D2 xor edx, edx
00445C1E 895408 18 mov dword ptr [eax+ecx+18], edx
00445C22 8B8D D0FCFFFF mov ecx, dword ptr [ebp-330]
00445C28 C1E1 05 shl ecx, 5
00445C2B 8B85 04FDFFFF mov eax, dword ptr [ebp-2FC]
00445C31 33D2 xor edx, edx
00445C33 895408 1C mov dword ptr [eax+ecx+1C], edx
00445C37 FF85 D0FCFFFF inc dword ptr [ebp-330]
00445C3D 8B8D D0FCFFFF mov ecx, dword ptr [ebp-330]
00445C43 3B8D 00FDFFFF cmp ecx, dword ptr [ebp-300]
00445C49 ^ 0F8C 5AFDFFFF jl <loc_4459A9>
00445C4F > 8B85 B0FCFFFF mov eax, dword ptr [ebp-350]
00445C55 8985 00FFFFFF mov dword ptr [ebp-100], eax
00445C5B 83BD 00FFFFFF 0>cmp dword ptr [ebp-100], 0
00445C62 > 74 30 je short <loc_445C94>
00445C64 8B95 00FFFFFF mov edx, dword ptr [ebp-100]
00445C6A 8B0A mov ecx, dword ptr [edx]
00445C6C 898D 04FFFFFF mov dword ptr [ebp-FC], ecx
00445C72 66:C785 80FDFFF>mov word ptr [ebp-280], 230
00445C7B BA 03000000 mov edx, 3
00445C80 8B85 00FFFFFF mov eax, dword ptr [ebp-100]
00445C86 8B08 mov ecx, dword ptr [eax]
00445C88 FF51 FC call dword ptr [ecx-4]
00445C8B 66:C785 80FDFFF>mov word ptr [ebp-280], 224
00445C94 > 8B85 40FDFFFF mov eax, dword ptr [ebp-2C0]
00445C9A 8038 00 cmp byte ptr [eax], 0
00445C9D 0F84 C8000000 je <loc_445D6B>
00445CA3 33D2 xor edx, edx
00445CA5 8995 D0FCFFFF mov dword ptr [ebp-330], edx
00445CAB EB 16 jmp short <loc_445CC3>
00445CAD > 8B8D 40FDFFFF mov ecx, dword ptr [ebp-2C0] ; 将用户名还原
00445CB3 8B85 D0FCFFFF mov eax, dword ptr [ebp-330]
00445CB9 > 800401 19 add byte ptr [ecx+eax], 19
00445CBD FF85 D0FCFFFF inc dword ptr [ebp-330]
00445CC3 > 8B95 40FDFFFF mov edx, dword ptr [ebp-2C0]
00445CC9 8B8D D0FCFFFF mov ecx, dword ptr [ebp-330]
00445CCF 803C0A 00 cmp byte ptr [edx+ecx], 0
00445CD3 74 09 je short <loc_445CDE>
00445CD5 83BD D0FCFFFF 3>cmp dword ptr [ebp-330], 32
00445CDC ^ 7C CF jl short <loc_445CAD>
00445CDE > 33C0 xor eax, eax
00445CE0 > 8985 D0FCFFFF mov dword ptr [ebp-330], eax
00445CE6 > EB 16 jmp short <loc_445CFE>
00445CE8 > 8B95 44FDFFFF mov edx, dword ptr [ebp-2BC] ; 将机器码又还原
00445CEE 8B8D D0FCFFFF mov ecx, dword ptr [ebp-330]
00445CF4 80040A E2 add byte ptr [edx+ecx], 0E2
00445CF8 FF85 D0FCFFFF inc dword ptr [ebp-330]
00445CFE > 8B85 44FDFFFF mov eax, dword ptr [ebp-2BC]
00445D04 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445D0A 803C10 00 cmp byte ptr [eax+edx], 0
00445D0E 74 09 je short <loc_445D19>
00445D10 83BD D0FCFFFF 3>cmp dword ptr [ebp-330], 32
00445D17 ^ 7C CF jl short <loc_445CE8>
00445D19 > 33C9 xor ecx, ecx
00445D1B 898D D0FCFFFF mov dword ptr [ebp-330], ecx
00445D21 EB 2D jmp short <loc_445D50>
00445D23 > 8B85 3CFDFFFF mov eax, dword ptr [ebp-2C4] ; 将注册码又还原
00445D29 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445D2F 8A0C10 mov cl, byte ptr [eax+edx]
00445D32 > 8B85 3CFDFFFF mov eax, dword ptr [ebp-2C4]
00445D38 80C1 0A add cl, 0A
00445D3B > 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00445D41 2A8D D0FCFFFF sub cl, byte ptr [ebp-330]
00445D47 880C10 mov byte ptr [eax+edx], cl
00445D4A FF85 D0FCFFFF inc dword ptr [ebp-330]
00445D50 > 8B8D 3CFDFFFF mov ecx, dword ptr [ebp-2C4]
00445D56 8B85 D0FCFFFF mov eax, dword ptr [ebp-330]
00445D5C 803C01 00 cmp byte ptr [ecx+eax], 0
00445D60 74 09 je short <loc_445D6B>
00445D62 83BD D0FCFFFF 3>cmp dword ptr [ebp-330], 32
00445D69 ^ 7C B8 jl short <loc_445D23>
00445D6B > 66:C785 80FDFFF>mov word ptr [ebp-280], 23C
00445D74 BA E4D55500 mov edx, 0055D5E4
00445D79 8D85 FCFEFFFF lea eax, dword ptr [ebp-104]
00445D7F E8 60B20F00 call <sub_540FE4>
00445D84 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445D8A 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00445D90 8B10 mov edx, dword ptr [eax]
00445D92 8B01 mov eax, dword ptr [ecx]
00445D94 8B80 D4020000 mov eax, dword ptr [eax+2D4]
00445D9A E8 65730B00 call <@Controls@TControl@SetText$>
00445D9F FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445DA5 8D85 FCFEFFFF lea eax, dword ptr [ebp-104]
00445DAB BA 02000000 mov edx, 2
00445DB0 E8 DBB40F00 call <sub_541290>
00445DB5 > 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00445DBB BA 64000000 mov edx, 64
00445DC0 8B01 mov eax, dword ptr [ecx]
00445DC2 8B80 D0020000 mov eax, dword ptr [eax+2D0]
00445DC8 E8 53BC0C00 call <@Comctrls@TProgressBar@SetM>
00445DCD 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00445DD3 33D2 xor edx, edx
00445DD5 8B01 mov eax, dword ptr [ecx]
00445DD7 8B80 D0020000 mov eax, dword ptr [eax+2D0]
00445DDD E8 4EBC0C00 call <@Comctrls@TProgressBar@SetP>
00445DE2 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00445DE8 8B01 mov eax, dword ptr [ecx]
00445DEA E8 053E0A00 call <unknown_libname_699>
00445DEF 8B95 E8EFFFFF mov edx, dword ptr [ebp-1018]
00445DF5 8995 D8FCFFFF mov dword ptr [ebp-328], edx
00445DFB 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00445E01 8B85 50FDFFFF mov eax, dword ptr [ebp-2B0]
00445E07 2B81 A00C0000 sub eax, dword ptr [ecx+CA0]
00445E0D > 05 F3030000 add eax, 3F3
00445E12 0185 88EFFFFF add dword ptr [ebp-1078], eax
00445E18 33C9 xor ecx, ecx
00445E1A 8B95 88EFFFFF mov edx, dword ptr [ebp-1078]
00445E20 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00445E26 8B18 mov ebx, dword ptr [eax]
00445E28 FF53 0C call dword ptr [ebx+C]
00445E2B 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00445E31 8D95 60FDFFFF lea edx, dword ptr [ebp-2A0]
00445E37 B9 04000000 mov ecx, 4
00445E3C 8B18 mov ebx, dword ptr [eax]
00445E3E FF53 04 call dword ptr [ebx+4]
00445E41 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00445E47 8D95 60FDFFFF lea edx, dword ptr [ebp-2A0]
00445E4D B9 04000000 mov ecx, 4
00445E52 8B18 mov ebx, dword ptr [eax]
00445E54 FF53 08 call dword ptr [ebx+8]
00445E57 C685 0BFDFFFF 0>mov byte ptr [ebp-2F5], 0
00445E5E 83BD 60FDFFFF 0>cmp dword ptr [ebp-2A0], 0
00445E65 75 14 jnz short <loc_445E7B>
00445E67 8B85 88EFFFFF mov eax, dword ptr [ebp-1078]
00445E6D > 83C0 04 add eax, 4
00445E70 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
00445E76 E9 550C0000 jmp <loc_446AD0>
00445E7B > 8B15 20D75900 mov edx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00445E81 8B0A mov ecx, dword ptr [edx]
00445E83 8B81 00030000 mov eax, dword ptr [ecx+300]
00445E89 8B10 mov edx, dword ptr [eax]
00445E8B FF92 B4000000 call dword ptr [edx+B4]
00445E91 3C 01 cmp al, 1
00445E93 0F85 370C0000 jnz <loc_446AD0>
00445E99 C685 0BFDFFFF 0>mov byte ptr [ebp-2F5], 1
00445EA0 66:C785 80FDFFF>mov word ptr [ebp-280], 248
00445EA9 BA F1D55500 mov edx, 0055D5F1
00445EAE 8D85 F8FEFFFF lea eax, dword ptr [ebp-108]
00445EB4 E8 2BB10F00 call <sub_540FE4>
00445EB9 FF85 8CFDFFFF inc dword ptr [ebp-274]
00445EBF 8B10 mov edx, dword ptr [eax]
00445EC1 A1 F0D65900 mov eax, dword ptr [59D6F0]
00445EC6 8B08 mov ecx, dword ptr [eax]
00445EC8 8B81 D4020000 mov eax, dword ptr [ecx+2D4]
00445ECE E8 31720B00 call <@Controls@TControl@SetText$>
00445ED3 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445ED9 8D85 F8FEFFFF lea eax, dword ptr [ebp-108]
00445EDF BA 02000000 mov edx, 2
00445EE4 E8 A7B30F00 call <sub_541290>
00445EE9 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00445EEF 8B01 mov eax, dword ptr [ecx]
00445EF1 E8 BA760B00 call <sub_4FD5B0>
00445EF6 68 07D65500 push 0055D607 ; ASCII "rb"
00445EFB 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00445F01 > 05 D4150000 add eax, 15D4
00445F06 E8 A1C1FBFF call <sub_4020AC>
00445F0B 50 push eax
00445F0C E8 5FE70E00 call <_fopen>
00445F11 83C4 08 add esp, 8
00445F14 8BD8 mov ebx, eax
00445F16 83BD 60FDFFFF 0>cmp dword ptr [ebp-2A0], 0
00445F1D 7E 17 jle short <loc_445F36>
00445F1F 6A 00 push 0
00445F21 8B85 88EFFFFF mov eax, dword ptr [ebp-1078]
00445F27 83C0 04 add eax, 4
00445F2A 50 push eax
00445F2B 53 push ebx
00445F2C E8 93EA0E00 call <_fseek>
00445F31 83C4 0C add esp, 0C
00445F34 > EB 2C jmp short <loc_445F62>
00445F36 > 83BD 60FDFFFF 0>cmp dword ptr [ebp-2A0], 0
00445F3D 7D 23 jge short <loc_445F62>
00445F3F 6A 00 push 0
00445F41 33D2 xor edx, edx
00445F43 2B95 60FDFFFF sub edx, dword ptr [ebp-2A0]
00445F49 52 push edx
00445F4A 53 push ebx
00445F4B E8 74EA0E00 call <_fseek>
00445F50 83C4 0C add esp, 0C
00445F53 8B8D 88EFFFFF mov ecx, dword ptr [ebp-1078]
00445F59 83C1 04 add ecx, 4
00445F5C 898D 60FDFFFF mov dword ptr [ebp-2A0], ecx
00445F62 > 66:C785 80FDFFF>mov word ptr [ebp-280], 254
00445F6B 8D85 F4FEFFFF lea eax, dword ptr [ebp-10C]
00445F71 E8 E2B9FBFF call <unknown_libname_55>
00445F76 8BD0 mov edx, eax
00445F78 > FF85 8CFDFFFF inc dword ptr [ebp-274]
00445F7E 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00445F84 8B81 7C030000 mov eax, dword ptr [ecx+37C]
00445F8A E8 45710B00 call <@TControl@GetText$qqrv>
00445F8F 8D85 F4FEFFFF lea eax, dword ptr [ebp-10C]
00445F95 E8 12C1FBFF call <sub_4020AC>
00445F9A 8BF8 mov edi, eax
00445F9C 33C0 xor eax, eax
00445F9E 83C9 FF or ecx, FFFFFFFF
00445FA1 8DB5 4CF4FFFF lea esi, dword ptr [ebp-BB4]
00445FA7 F2:AE repne scas byte ptr es:[edi]
00445FA9 F7D1 not ecx
00445FAB 2BF9 sub edi, ecx
00445FAD 8BD1 mov edx, ecx
00445FAF 87F7 xchg edi, esi
00445FB1 C1E9 02 shr ecx, 2
00445FB4 8BC7 mov eax, edi
00445FB6 F3:A5 rep movs dword ptr es:[edi], dwo>
00445FB8 8BCA mov ecx, edx
00445FBA BA 02000000 mov edx, 2
00445FBF 83E1 03 and ecx, 3
00445FC2 8D85 F4FEFFFF lea eax, dword ptr [ebp-10C]
00445FC8 F3:A4 rep movs byte ptr es:[edi], byte>
00445FCA FF8D 8CFDFFFF dec dword ptr [ebp-274]
00445FD0 E8 BBB20F00 call <sub_541290>
00445FD5 68 0AD65500 push 0055D60A ; ASCII "lsflash.wav"
00445FDA 8D8D 4CF4FFFF lea ecx, dword ptr [ebp-BB4]
00445FE0 > 51 push ecx
00445FE1 E8 62C80E00 call <_strcat>
00445FE6 83C4 08 add esp, 8
00445FE9 8D85 4CF4FFFF lea eax, dword ptr [ebp-BB4]
00445FEF 50 push eax
00445FF0 E8 CBF71000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
00445FF5 8B95 ECEFFFFF mov edx, dword ptr [ebp-1014]
00445FFB 8D8D 4CF4FFFF lea ecx, dword ptr [ebp-BB4]
00446001 52 push edx
00446002 53 push ebx
00446003 > 51 push ecx
00446004 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
0044600A > 50 push eax
0044600B E8 4C2E0000 call <sub_448E5C>
00446010 83C4 10 add esp, 10
00446013 53 push ebx
00446014 E8 EBE20E00 call <_fclose>
00446019 59 pop ecx
0044601A 68 16D65500 push 0055D616 ; ASCII "rb"
0044601F 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
00446025 52 push edx
00446026 E8 45E60E00 call <_fopen>
0044602B 83C4 08 add esp, 8
0044602E 8BD8 mov ebx, eax
00446030 6A 00 push 0
00446032 6A 22 push 22
00446034 53 push ebx
00446035 E8 8AE90E00 call <_fseek>
0044603A 83C4 0C add esp, 0C
0044603D 53 push ebx
0044603E 6A 01 push 1
00446040 > 6A 02 push 2
00446042 8D85 08FDFFFF lea eax, dword ptr [ebp-2F8]
00446048 50 push eax
00446049 E8 9AE80E00 call <_fread>
0044604E 83C4 10 add esp, 10
00446051 53 push ebx
00446052 E8 ADE20E00 call <_fclose>
00446057 66:83BD 08FDFFF>cmp word ptr [ebp-2F8], 8
0044605F 59 pop ecx
00446060 0F85 52030000 jnz <loc_4463B8>
00446066 66:C785 80FDFFF>mov word ptr [ebp-280], 260
0044606F > 8D85 F0FEFFFF lea eax, dword ptr [ebp-110]
00446075 E8 DEB8FBFF call <unknown_libname_55>
0044607A 8BD0 mov edx, eax
0044607C FF85 8CFDFFFF inc dword ptr [ebp-274]
00446082 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00446088 8B81 7C030000 mov eax, dword ptr [ecx+37C]
0044608E E8 41700B00 call <@TControl@GetText$qqrv>
00446093 8D85 F0FEFFFF lea eax, dword ptr [ebp-110]
00446099 E8 0EC0FBFF call <sub_4020AC>
0044609E > 8BF8 mov edi, eax
004460A0 33C0 xor eax, eax
004460A2 83C9 FF or ecx, FFFFFFFF
004460A5 8DB5 4CF0FFFF lea esi, dword ptr [ebp-FB4]
004460AB F2:AE repne scas byte ptr es:[edi]
004460AD F7D1 not ecx
004460AF 2BF9 sub edi, ecx
004460B1 8BD1 mov edx, ecx
004460B3 87F7 xchg edi, esi
004460B5 C1E9 02 shr ecx, 2
004460B8 8BC7 mov eax, edi
004460BA F3:A5 rep movs dword ptr es:[edi], dwo>
004460BC 8BCA mov ecx, edx
004460BE BA 02000000 mov edx, 2
004460C3 83E1 03 and ecx, 3
004460C6 8D85 F0FEFFFF lea eax, dword ptr [ebp-110]
004460CC F3:A4 rep movs byte ptr es:[edi], byte>
004460CE FF8D 8CFDFFFF dec dword ptr [ebp-274]
004460D4 E8 B7B10F00 call <sub_541290>
004460D9 68 19D65500 push 0055D619 ; ASCII "lsflash1.wav"
004460DE 8D8D 4CF0FFFF lea ecx, dword ptr [ebp-FB4]
004460E4 51 push ecx
004460E5 E8 5EC70E00 call <_strcat>
004460EA 83C4 08 add esp, 8
004460ED 8D85 4CF0FFFF lea eax, dword ptr [ebp-FB4]
004460F3 50 push eax
004460F4 E8 C7F61000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
004460F9 8D95 4CF0FFFF lea edx, dword ptr [ebp-FB4]
004460FF 8D85 E8FEFFFF lea eax, dword ptr [ebp-118]
00446105 E8 DAAE0F00 call <sub_540FE4>
0044610A FF85 8CFDFFFF inc dword ptr [ebp-274]
00446110 8B10 mov edx, dword ptr [eax]
00446112 8D85 ECFEFFFF lea eax, dword ptr [ebp-114]
00446118 52 push edx
00446119 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
0044611F 66:C785 80FDFFF>mov word ptr [ebp-280], 26C
00446128 E8 B7AE0F00 call <sub_540FE4>
0044612D FF85 8CFDFFFF inc dword ptr [ebp-274]
00446133 8B00 mov eax, dword ptr [eax]
00446135 5A pop edx
00446136 E8 A11A0E00 call <sub_527BDC>
0044613B > FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446141 8D85 E8FEFFFF lea eax, dword ptr [ebp-118]
00446147 BA 02000000 mov edx, 2
0044614C E8 3FB10F00 call <sub_541290>
00446151 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446157 8D85 ECFEFFFF lea eax, dword ptr [ebp-114]
0044615D BA 02000000 mov edx, 2
00446162 E8 29B10F00 call <sub_541290>
00446167 8D8D 4CF4FFFF lea ecx, dword ptr [ebp-BB4]
0044616D 8D85 4CF0FFFF lea eax, dword ptr [ebp-FB4]
00446173 > 51 push ecx
00446174 50 push eax
00446175 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
0044617B 52 push edx
0044617C E8 B3DFFFFF call <sub_444134>
00446181 83C4 0C add esp, 0C
00446184 48 dec eax
00446185 0F84 21020000 je <loc_4463AC>
0044618B 8B8D B8FCFFFF mov ecx, dword ptr [ebp-348]
00446191 898D E0FEFFFF mov dword ptr [ebp-120], ecx
00446197 83BD E0FEFFFF 0>cmp dword ptr [ebp-120], 0
0044619E 74 30 je short <loc_4461D0>
004461A0 8B85 E0FEFFFF mov eax, dword ptr [ebp-120]
004461A6 8B10 mov edx, dword ptr [eax]
004461A8 8995 E4FEFFFF mov dword ptr [ebp-11C], edx
004461AE 66:C785 80FDFFF>mov word ptr [ebp-280], 284
004461B7 BA 03000000 mov edx, 3
004461BC 8B85 E0FEFFFF mov eax, dword ptr [ebp-120]
004461C2 > 8B08 mov ecx, dword ptr [eax]
004461C4 FF51 FC call dword ptr [ecx-4]
004461C7 66:C785 80FDFFF>mov word ptr [ebp-280], 278
004461D0 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004461D6 8985 D8FEFFFF mov dword ptr [ebp-128], eax
004461DC 83BD D8FEFFFF 0>cmp dword ptr [ebp-128], 0
004461E3 74 30 je short <loc_446215>
004461E5 8B95 D8FEFFFF mov edx, dword ptr [ebp-128]
004461EB 8B0A mov ecx, dword ptr [edx]
004461ED 898D DCFEFFFF mov dword ptr [ebp-124], ecx
004461F3 66:C785 80FDFFF>mov word ptr [ebp-280], 29C
004461FC BA 03000000 mov edx, 3
00446201 8B85 D8FEFFFF mov eax, dword ptr [ebp-128]
00446207 8B08 mov ecx, dword ptr [eax]
00446209 FF51 FC call dword ptr [ecx-4]
0044620C 66:C785 80FDFFF>mov word ptr [ebp-280], 290
00446215 > 8B85 04FDFFFF mov eax, dword ptr [ebp-2FC]
0044621B 50 push eax
0044621C E8 A7BB0E00 call <__rtl_close>
00446221 59 pop ecx
00446222 8D95 4CF0FFFF lea edx, dword ptr [ebp-FB4]
00446228 52 push edx
00446229 E8 92F51000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
0044622E 66:C785 80FDFFF>mov word ptr [ebp-280], 2A8
00446237 8D85 D4FEFFFF lea eax, dword ptr [ebp-12C]
0044623D E8 16B7FBFF call <unknown_libname_55>
00446242 8BD0 mov edx, eax
00446244 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044624A 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00446250 8B81 7C030000 mov eax, dword ptr [ecx+37C]
00446256 E8 796E0B00 call <@TControl@GetText$qqrv>
0044625B 8D95 D4FEFFFF lea edx, dword ptr [ebp-12C]
00446261 > 8D85 CCFEFFFF lea eax, dword ptr [ebp-134]
00446267 52 push edx
00446268 > E8 EBB6FBFF call <unknown_libname_55>
0044626D 50 push eax
0044626E FF85 8CFDFFFF inc dword ptr [ebp-274]
00446274 BA 26D65500 mov edx, 0055D626 ; ASCII "lsflash.tmp"
00446279 8D85 D0FEFFFF lea eax, dword ptr [ebp-130]
0044627F E8 60AD0F00 call <sub_540FE4>
00446284 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044628A 8D95 D0FEFFFF lea edx, dword ptr [ebp-130]
00446290 > 59 pop ecx
00446291 58 pop eax
00446292 E8 51B00F00 call <@System@AnsiString@$badd$xq>
00446297 > 8D85 CCFEFFFF lea eax, dword ptr [ebp-134]
0044629D 8B00 mov eax, dword ptr [eax]
0044629F E8 38AD0F00 call <j_unknown_libname_576>
004462A4 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004462AA 8D85 CCFEFFFF lea eax, dword ptr [ebp-134]
004462B0 BA 02000000 mov edx, 2
004462B5 E8 D6AF0F00 call <sub_541290>
004462BA FF8D 8CFDFFFF dec dword ptr [ebp-274]
004462C0 8D85 D0FEFFFF lea eax, dword ptr [ebp-130]
004462C6 BA 02000000 mov edx, 2
004462CB E8 C0AF0F00 call <sub_541290>
004462D0 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004462D6 8D85 D4FEFFFF lea eax, dword ptr [ebp-12C]
004462DC BA 02000000 mov edx, 2
004462E1 E8 AAAF0F00 call <sub_541290>
004462E6 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
004462EC 8B01 mov eax, dword ptr [ecx]
004462EE 8078 47 01 cmp byte ptr [eax+47], 1
004462F2 75 6E jnz short <loc_446362>
004462F4 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
004462FA 8B02 mov eax, dword ptr [edx]
004462FC E8 3B370A00 call <@Forms@TCustomForm@Close$qq>
00446301 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446307 8B0A mov ecx, dword ptr [edx]
00446309 898D C4FEFFFF mov dword ptr [ebp-13C], ecx
0044630F 83BD C4FEFFFF 0>cmp dword ptr [ebp-13C], 0
00446316 74 30 je short <loc_446348>
00446318 8B85 C4FEFFFF mov eax, dword ptr [ebp-13C]
0044631E 8B10 mov edx, dword ptr [eax]
00446320 8995 C8FEFFFF mov dword ptr [ebp-138], edx
00446326 66:C785 80FDFFF>mov word ptr [ebp-280], 2C0
0044632F > BA 03000000 mov edx, 3
00446334 8B85 C4FEFFFF mov eax, dword ptr [ebp-13C]
0044633A 8B08 mov ecx, dword ptr [eax]
0044633C FF51 FC call dword ptr [ecx-4]
0044633F 66:C785 80FDFFF>mov word ptr [ebp-280], 2B4
00446348 > 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044634E B2 01 mov dl, 1
00446350 A1 CC8E5700 mov eax, dword ptr [578ECC]
00446355 E8 F29F0100 call <@Sysutils@EVariantError@$bc>
0044635A > 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446360 8902 mov dword ptr [edx], eax
00446362 > FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446368 8D45 F4 lea eax, dword ptr [ebp-C]
0044636B BA 02000000 mov edx, 2
00446370 E8 1BAF0F00 call <sub_541290>
00446375 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044637B 8D45 F8 lea eax, dword ptr [ebp-8]
0044637E BA 02000000 mov edx, 2
00446383 E8 08AF0F00 call <sub_541290>
00446388 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044638E 8D45 FC lea eax, dword ptr [ebp-4]
00446391 BA 02000000 mov edx, 2
00446396 E8 F5AE0F00 call <sub_541290>
0044639B 8B85 70FDFFFF mov eax, dword ptr [ebp-290]
004463A1 64:A3 00000000 mov dword ptr fs:[0], eax
004463A7 E9 64260000 jmp <loc_448A10>
004463AC > 8D8D 4CF0FFFF lea ecx, dword ptr [ebp-FB4]
004463B2 51 push ecx
004463B3 E8 08F41000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
004463B8 > A1 20D75900 mov eax, dword ptr [59D720]
004463BD 8B10 mov edx, dword ptr [eax]
004463BF 8B82 0C030000 mov eax, dword ptr [edx+30C]
004463C5 8B10 mov edx, dword ptr [eax]
004463C7 FF92 B4000000 call dword ptr [edx+B4]
004463CD 3C 01 cmp al, 1
004463CF 0F85 AD020000 jnz <loc_446682>
004463D5 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
004463DB 8B01 mov eax, dword ptr [ecx]
004463DD 8B80 04030000 mov eax, dword ptr [eax+304]
004463E3 8B10 mov edx, dword ptr [eax]
004463E5 FF92 B4000000 call dword ptr [edx+B4]
004463EB 3C 01 cmp al, 1
004463ED 0F85 DD060000 jnz <loc_446AD0>
004463F3 83BD FCEFFFFF 0>cmp dword ptr [ebp-1004], 0
004463FA 0F95C1 setne cl
004463FD 83E1 01 and ecx, 1
00446400 8D85 84F8FFFF lea eax, dword ptr [ebp-77C]
00446406 51 push ecx
00446407 50 push eax
00446408 66:C785 80FDFFF>mov word ptr [ebp-280], 2CC
00446411 8D85 C0FEFFFF lea eax, dword ptr [ebp-140]
00446417 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
0044641D E8 C2AB0F00 call <sub_540FE4>
00446422 FF85 8CFDFFFF inc dword ptr [ebp-274]
00446428 8B10 mov edx, dword ptr [eax]
0044642A 52 push edx
0044642B 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00446431 51 push ecx
00446432 E8 B12E0000 call <sub_4492E8>
00446437 > 83C4 10 add esp, 10
0044643A 48 dec eax
0044643B 0F95C0 setne al
0044643E 83E0 01 and eax, 1
00446441 BA 02000000 mov edx, 2
00446446 50 push eax
00446447 8D85 C0FEFFFF lea eax, dword ptr [ebp-140]
0044644D FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446453 E8 38AE0F00 call <sub_541290>
00446458 59 pop ecx
00446459 84C9 test cl, cl
0044645B 0F84 6F060000 je <loc_446AD0>
00446461 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446467 8985 B8FEFFFF mov dword ptr [ebp-148], eax
0044646D 83BD B8FEFFFF 0>cmp dword ptr [ebp-148], 0
00446474 74 30 je short <loc_4464A6>
00446476 8B95 B8FEFFFF mov edx, dword ptr [ebp-148]
0044647C 8B0A mov ecx, dword ptr [edx]
0044647E 898D BCFEFFFF mov dword ptr [ebp-144], ecx
00446484 66:C785 80FDFFF>mov word ptr [ebp-280], 2E4
0044648D BA 03000000 mov edx, 3
00446492 8B85 B8FEFFFF mov eax, dword ptr [ebp-148]
00446498 8B08 mov ecx, dword ptr [eax]
0044649A FF51 FC call dword ptr [ecx-4]
0044649D 66:C785 80FDFFF>mov word ptr [ebp-280], 2D8
004464A6 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004464AC 8985 B0FEFFFF mov dword ptr [ebp-150], eax
004464B2 83BD B0FEFFFF 0>cmp dword ptr [ebp-150], 0
004464B9 74 30 je short <loc_4464EB>
004464BB > 8B95 B0FEFFFF mov edx, dword ptr [ebp-150]
004464C1 8B0A mov ecx, dword ptr [edx]
004464C3 898D B4FEFFFF mov dword ptr [ebp-14C], ecx
004464C9 66:C785 80FDFFF>mov word ptr [ebp-280], 2FC
004464D2 BA 03000000 mov edx, 3
004464D7 > 8B85 B0FEFFFF mov eax, dword ptr [ebp-150]
004464DD 8B08 mov ecx, dword ptr [eax]
004464DF FF51 FC call dword ptr [ecx-4]
004464E2 66:C785 80FDFFF>mov word ptr [ebp-280], 2F0
004464EB > 8B85 04FDFFFF mov eax, dword ptr [ebp-2FC]
004464F1 50 push eax
004464F2 E8 D1B80E00 call <__rtl_close>
004464F7 > 59 pop ecx
004464F8 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
004464FE 52 push edx
004464FF > E8 BCF21000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
00446504 66:C785 80FDFFF>mov word ptr [ebp-280], 308
0044650D > 8D85 ACFEFFFF lea eax, dword ptr [ebp-154]
00446513 E8 40B4FBFF call <unknown_libname_55>
00446518 > 8BD0 mov edx, eax
0044651A FF85 8CFDFFFF inc dword ptr [ebp-274]
00446520 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00446526 8B81 7C030000 mov eax, dword ptr [ecx+37C]
0044652C E8 A36B0B00 call <@TControl@GetText$qqrv>
00446531 8D95 ACFEFFFF lea edx, dword ptr [ebp-154]
00446537 8D85 A4FEFFFF lea eax, dword ptr [ebp-15C]
0044653D 52 push edx
0044653E E8 15B4FBFF call <unknown_libname_55>
00446543 50 push eax
00446544 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044654A BA 32D65500 mov edx, 0055D632 ; ASCII "lsfalsh.tmp"
0044654F 8D85 A8FEFFFF lea eax, dword ptr [ebp-158]
00446555 E8 8AAA0F00 call <sub_540FE4>
0044655A FF85 8CFDFFFF inc dword ptr [ebp-274]
00446560 > 8D95 A8FEFFFF lea edx, dword ptr [ebp-158]
00446566 59 pop ecx
00446567 58 pop eax
00446568 E8 7BAD0F00 call <@System@AnsiString@$badd$xq>
0044656D 8D85 A4FEFFFF lea eax, dword ptr [ebp-15C]
00446573 8B00 mov eax, dword ptr [eax]
00446575 E8 62AA0F00 call <j_unknown_libname_576>
0044657A FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446580 8D85 A4FEFFFF lea eax, dword ptr [ebp-15C]
00446586 BA 02000000 mov edx, 2
0044658B E8 00AD0F00 call <sub_541290>
00446590 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446596 8D85 A8FEFFFF lea eax, dword ptr [ebp-158]
0044659C BA 02000000 mov edx, 2
004465A1 E8 EAAC0F00 call <sub_541290>
004465A6 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004465AC 8D85 ACFEFFFF lea eax, dword ptr [ebp-154]
004465B2 BA 02000000 mov edx, 2
004465B7 E8 D4AC0F00 call <sub_541290>
004465BC 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
004465C2 8B01 mov eax, dword ptr [ecx]
004465C4 8078 47 01 cmp byte ptr [eax+47], 1
004465C8 75 6E jnz short <stru_59C638>
004465CA 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
004465D0 8B02 mov eax, dword ptr [edx]
004465D2 E8 65340A00 call <@Forms@TCustomForm@Close$qq>
004465D7 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
004465DD 8B0A mov ecx, dword ptr [edx]
004465DF 898D 9CFEFFFF mov dword ptr [ebp-164], ecx
004465E5 83BD 9CFEFFFF 0>cmp dword ptr [ebp-164], 0
004465EC 74 30 je short <loc_44661E>
004465EE 8B85 9CFEFFFF mov eax, dword ptr [ebp-164]
004465F4 8B10 mov edx, dword ptr [eax]
004465F6 8995 A0FEFFFF mov dword ptr [ebp-160], edx
004465FC 66:C785 80FDFFF>mov word ptr [ebp-280], 320
00446605 BA 03000000 mov edx, 3
0044660A 8B85 9CFEFFFF mov eax, dword ptr [ebp-164]
00446610 8B08 mov ecx, dword ptr [eax]
00446612 FF51 FC call dword ptr [ecx-4]
00446615 66:C785 80FDFFF>mov word ptr [ebp-280], 314
0044661E > 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00446624 > B2 01 mov dl, 1
00446626 A1 CC8E5700 mov eax, dword ptr [578ECC]
0044662B E8 1C9D0100 call <@Sysutils@EVariantError@$bc>
00446630 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446636 8902 mov dword ptr [edx], eax
00446638 > FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044663E 8D45 F4 lea eax, dword ptr [ebp-C]
00446641 BA 02000000 mov edx, 2
00446646 E8 45AC0F00 call <sub_541290>
0044664B FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446651 8D45 F8 lea eax, dword ptr [ebp-8]
00446654 BA 02000000 mov edx, 2
00446659 E8 32AC0F00 call <sub_541290>
0044665E FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446664 8D45 FC lea eax, dword ptr [ebp-4]
00446667 BA 02000000 mov edx, 2
0044666C E8 1FAC0F00 call <sub_541290>
00446671 8B85 70FDFFFF mov eax, dword ptr [ebp-290]
00446677 64:A3 00000000 mov dword ptr fs:[0], eax
0044667D E9 8E230000 jmp <loc_448A10>
00446682 > 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00446688 > 8B01 mov eax, dword ptr [ecx]
0044668A 8B80 08030000 mov eax, dword ptr [eax+308]
00446690 8B10 mov edx, dword ptr [eax]
00446692 FF92 B4000000 call dword ptr [edx+B4]
00446698 > 3C 01 cmp al, 1
0044669A 0F85 30040000 jnz <loc_446AD0>
004466A0 66:C785 80FDFFF>mov word ptr [ebp-280], 32C
004466A9 8D85 98FEFFFF lea eax, dword ptr [ebp-168]
004466AF E8 A4B2FBFF call <unknown_libname_55>
004466B4 8BD0 mov edx, eax
004466B6 FF85 8CFDFFFF inc dword ptr [ebp-274]
004466BC 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
004466C2 8B81 7C030000 mov eax, dword ptr [ecx+37C]
004466C8 E8 076A0B00 call <@TControl@GetText$qqrv>
004466CD 8D95 98FEFFFF lea edx, dword ptr [ebp-168]
004466D3 8D85 90FEFFFF lea eax, dword ptr [ebp-170]
004466D9 52 push edx
004466DA E8 79B2FBFF call <unknown_libname_55>
004466DF 50 push eax
004466E0 FF85 8CFDFFFF inc dword ptr [ebp-274]
004466E6 BA 3ED65500 mov edx, 0055D63E ; ASCII "lsflash.mp3"
004466EB 8D85 94FEFFFF lea eax, dword ptr [ebp-16C]
004466F1 E8 EEA80F00 call <sub_540FE4>
004466F6 FF85 8CFDFFFF inc dword ptr [ebp-274]
004466FC 8D95 94FEFFFF lea edx, dword ptr [ebp-16C]
00446702 59 pop ecx
00446703 58 pop eax
00446704 E8 DFAB0F00 call <@System@AnsiString@$badd$xq>
00446709 8D95 90FEFFFF lea edx, dword ptr [ebp-170]
0044670F 8D45 F4 lea eax, dword ptr [ebp-C]
00446712 E8 A9AB0F00 call <sub_5412C0>
00446717 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044671D 8D85 90FEFFFF lea eax, dword ptr [ebp-170]
00446723 BA 02000000 mov edx, 2
00446728 > E8 63AB0F00 call <sub_541290>
0044672D FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446733 8D85 94FEFFFF lea eax, dword ptr [ebp-16C]
00446739 BA 02000000 mov edx, 2
0044673E E8 4DAB0F00 call <sub_541290>
00446743 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446749 8D85 98FEFFFF lea eax, dword ptr [ebp-168]
0044674F BA 02000000 mov edx, 2
00446754 E8 37AB0F00 call <sub_541290>
00446759 DB85 98F8FFFF fild dword ptr [ebp-768]
0044675F 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00446765 D99D 54FDFFFF fstp dword ptr [ebp-2AC]
0044676B 8B01 mov eax, dword ptr [ecx]
0044676D 8B80 D4020000 mov eax, dword ptr [eax+2D4]
00446773 8B10 mov edx, dword ptr [eax]
00446775 FF92 B4000000 call dword ptr [edx+B4]
0044677B 3C 01 cmp al, 1
0044677D 75 1A jnz short <loc_446799>
0044677F 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00446785 8B01 mov eax, dword ptr [ecx]
00446787 DB80 24030000 fild dword ptr [eax+324]
0044678D D8BD 54FDFFFF fdivr dword ptr [ebp-2AC]
00446793 D99D 54FDFFFF fstp dword ptr [ebp-2AC]
00446799 > FFB5 54FDFFFF push dword ptr [ebp-2AC]
0044679F 8B4D F4 mov ecx, dword ptr [ebp-C]
004467A2 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
004467A8 51 push ecx
004467A9 8D85 8CFEFFFF lea eax, dword ptr [ebp-174]
004467AF 66:C785 80FDFFF>mov word ptr [ebp-280], 338
004467B8 E8 27A80F00 call <sub_540FE4>
004467BD FF85 8CFDFFFF inc dword ptr [ebp-274]
004467C3 8B08 mov ecx, dword ptr [eax]
004467C5 51 push ecx
004467C6 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
004467CC 50 push eax
004467CD E8 5ED2FFFF call <sub_443A30>
004467D2 83C4 10 add esp, 10
004467D5 8985 D4FCFFFF mov dword ptr [ebp-32C], eax
004467DB FF8D 8CFDFFFF dec dword ptr [ebp-274]
004467E1 8D85 8CFEFFFF lea eax, dword ptr [ebp-174]
004467E7 BA 02000000 mov edx, 2
004467EC E8 9FAA0F00 call <sub_541290>
004467F1 83BD D4FCFFFF 0>cmp dword ptr [ebp-32C], 1
004467F8 0F84 D2020000 je <loc_446AD0>
004467FE 83BD D4FCFFFF 0>cmp dword ptr [ebp-32C], 0
00446805 0F85 A4000000 jnz <loc_4468AF>
0044680B 66:C785 80FDFFF>mov word ptr [ebp-280], 344
00446814 8D85 80FEFFFF lea eax, dword ptr [ebp-180]
0044681A E8 39B1FBFF call <unknown_libname_55>
0044681F 50 push eax
00446820 FF85 8CFDFFFF inc dword ptr [ebp-274]
00446826 BA 58D65500 mov edx, 0055D658
0044682B 8D85 84FEFFFF lea eax, dword ptr [ebp-17C]
00446831 E8 AEA70F00 call <sub_540FE4>
00446836 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044683C 8D95 84FEFFFF lea edx, dword ptr [ebp-17C]
00446842 52 push edx
00446843 BA 4AD65500 mov edx, 0055D64A
00446848 > 8D85 88FEFFFF lea eax, dword ptr [ebp-178]
0044684E E8 91A70F00 call <sub_540FE4>
00446853 FF85 8CFDFFFF inc dword ptr [ebp-274]
00446859 5A pop edx
0044685A 59 pop ecx
0044685B E8 88AA0F00 call <@System@AnsiString@$badd$xq>
00446860 8D85 80FEFFFF lea eax, dword ptr [ebp-180]
00446866 8B00 mov eax, dword ptr [eax]
00446868 E8 37140B00 call <@Dialogs@ShowMessage$qqrx17>
0044686D FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446873 8D85 80FEFFFF lea eax, dword ptr [ebp-180]
00446879 BA 02000000 mov edx, 2
0044687E E8 0DAA0F00 call <sub_541290>
00446883 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446889 8D85 84FEFFFF lea eax, dword ptr [ebp-17C]
0044688F BA 02000000 mov edx, 2
00446894 E8 F7A90F00 call <sub_541290>
00446899 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044689F 8D85 88FEFFFF lea eax, dword ptr [ebp-178]
004468A5 BA 02000000 mov edx, 2
004468AA E8 E1A90F00 call <sub_541290>
004468AF > 8B8D B8FCFFFF mov ecx, dword ptr [ebp-348]
004468B5 898D 78FEFFFF mov dword ptr [ebp-188], ecx
004468BB 83BD 78FEFFFF 0>cmp dword ptr [ebp-188], 0
004468C2 74 30 je short <loc_4468F4>
004468C4 8B85 78FEFFFF mov eax, dword ptr [ebp-188]
004468CA 8B10 mov edx, dword ptr [eax]
004468CC 8995 7CFEFFFF mov dword ptr [ebp-184], edx
004468D2 66:C785 80FDFFF>mov word ptr [ebp-280], 35C
004468DB BA 03000000 mov edx, 3
004468E0 8B85 78FEFFFF mov eax, dword ptr [ebp-188]
004468E6 8B08 mov ecx, dword ptr [eax]
004468E8 FF51 FC call dword ptr [ecx-4]
004468EB 66:C785 80FDFFF>mov word ptr [ebp-280], 350
004468F4 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004468FA 8985 70FEFFFF mov dword ptr [ebp-190], eax
00446900 83BD 70FEFFFF 0>cmp dword ptr [ebp-190], 0
00446907 74 30 je short <loc_446939>
00446909 8B95 70FEFFFF mov edx, dword ptr [ebp-190]
0044690F 8B0A mov ecx, dword ptr [edx]
00446911 898D 74FEFFFF mov dword ptr [ebp-18C], ecx
00446917 66:C785 80FDFFF>mov word ptr [ebp-280], 374
00446920 BA 03000000 mov edx, 3
00446925 8B85 70FEFFFF mov eax, dword ptr [ebp-190]
0044692B 8B08 mov ecx, dword ptr [eax]
0044692D FF51 FC call dword ptr [ecx-4]
00446930 66:C785 80FDFFF>mov word ptr [ebp-280], 368
00446939 > 8B85 04FDFFFF mov eax, dword ptr [ebp-2FC]
0044693F 50 push eax
00446940 E8 83B40E00 call <__rtl_close>
00446945 59 pop ecx
00446946 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
0044694C 52 push edx
0044694D E8 6EEE1000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
00446952 66:C785 80FDFFF>mov word ptr [ebp-280], 380
0044695B 8D85 6CFEFFFF lea eax, dword ptr [ebp-194]
00446961 E8 F2AFFBFF call <unknown_libname_55>
00446966 8BD0 mov edx, eax
00446968 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044696E 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00446974 8B81 7C030000 mov eax, dword ptr [ecx+37C]
0044697A E8 55670B00 call <@TControl@GetText$qqrv>
0044697F 8D95 6CFEFFFF lea edx, dword ptr [ebp-194]
00446985 8D85 64FEFFFF lea eax, dword ptr [ebp-19C]
0044698B 52 push edx
0044698C E8 C7AFFBFF call <unknown_libname_55>
00446991 50 push eax
00446992 FF85 8CFDFFFF inc dword ptr [ebp-274]
00446998 BA 5AD65500 mov edx, 0055D65A ; ASCII "lsfalsh.tmp"
0044699D 8D85 68FEFFFF lea eax, dword ptr [ebp-198]
004469A3 E8 3CA60F00 call <sub_540FE4>
004469A8 > FF85 8CFDFFFF inc dword ptr [ebp-274]
004469AE 8D95 68FEFFFF lea edx, dword ptr [ebp-198]
004469B4 59 pop ecx
004469B5 58 pop eax
004469B6 E8 2DA90F00 call <@System@AnsiString@$badd$xq>
004469BB 8D85 64FEFFFF lea eax, dword ptr [ebp-19C]
004469C1 8B00 mov eax, dword ptr [eax]
004469C3 E8 14A60F00 call <j_unknown_libname_576>
004469C8 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004469CE 8D85 64FEFFFF lea eax, dword ptr [ebp-19C]
004469D4 BA 02000000 mov edx, 2
004469D9 E8 B2A80F00 call <sub_541290>
004469DE FF8D 8CFDFFFF dec dword ptr [ebp-274]
004469E4 8D85 68FEFFFF lea eax, dword ptr [ebp-198]
004469EA BA 02000000 mov edx, 2
004469EF E8 9CA80F00 call <sub_541290>
004469F4 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004469FA 8D85 6CFEFFFF lea eax, dword ptr [ebp-194]
00446A00 BA 02000000 mov edx, 2
00446A05 E8 86A80F00 call <sub_541290>
00446A0A 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446A10 8B01 mov eax, dword ptr [ecx]
00446A12 8078 47 01 cmp byte ptr [eax+47], 1
00446A16 75 6E jnz short <loc_446A86>
00446A18 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446A1E 8B02 mov eax, dword ptr [edx]
00446A20 E8 17300A00 call <@Forms@TCustomForm@Close$qq>
00446A25 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446A2B 8B0A mov ecx, dword ptr [edx]
00446A2D 898D 5CFEFFFF mov dword ptr [ebp-1A4], ecx
00446A33 83BD 5CFEFFFF 0>cmp dword ptr [ebp-1A4], 0
00446A3A 74 30 je short <loc_446A6C>
00446A3C 8B85 5CFEFFFF mov eax, dword ptr [ebp-1A4]
00446A42 8B10 mov edx, dword ptr [eax]
00446A44 8995 60FEFFFF mov dword ptr [ebp-1A0], edx
00446A4A 66:C785 80FDFFF>mov word ptr [ebp-280], 398
00446A53 BA 03000000 mov edx, 3
00446A58 8B85 5CFEFFFF mov eax, dword ptr [ebp-1A4]
00446A5E 8B08 mov ecx, dword ptr [eax]
00446A60 FF51 FC call dword ptr [ecx-4]
00446A63 66:C785 80FDFFF>mov word ptr [ebp-280], 38C
00446A6C > 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00446A72 B2 01 mov dl, 1
00446A74 A1 CC8E5700 mov eax, dword ptr [578ECC]
00446A79 E8 CE980100 call <@Sysutils@EVariantError@$bc>
00446A7E 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446A84 8902 mov dword ptr [edx], eax
00446A86 > FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446A8C 8D45 F4 lea eax, dword ptr [ebp-C]
00446A8F BA 02000000 mov edx, 2
00446A94 E8 F7A70F00 call <sub_541290>
00446A99 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446A9F 8D45 F8 lea eax, dword ptr [ebp-8]
00446AA2 BA 02000000 mov edx, 2
00446AA7 E8 E4A70F00 call <sub_541290>
00446AAC > FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446AB2 > 8D45 FC lea eax, dword ptr [ebp-4]
00446AB5 BA 02000000 mov edx, 2
00446ABA E8 D1A70F00 call <sub_541290>
00446ABF 8B85 70FDFFFF mov eax, dword ptr [ebp-290]
00446AC5 64:A3 00000000 mov dword ptr fs:[0], eax
00446ACB E9 401F0000 jmp <loc_448A10>
00446AD0 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446AD6 E8 6D580D00 call <@Classes@TStream@GetPositio>
00446ADB 8985 C0FCFFFF mov dword ptr [ebp-340], eax
00446AE1 33D2 xor edx, edx
00446AE3 8995 D0FCFFFF mov dword ptr [ebp-330], edx
00446AE9 8D8D 6CF8FFFF lea ecx, dword ptr [ebp-794]
00446AEF 898D ACFCFFFF mov dword ptr [ebp-354], ecx
00446AF5 > 8B85 44FDFFFF mov eax, dword ptr [ebp-2BC] ; 把用户名与机器器进行运算
00446AFB 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00446B01 8A0C10 mov cl, byte ptr [eax+edx]
00446B04 8B85 40FDFFFF mov eax, dword ptr [ebp-2C0]
00446B0A 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00446B10 220C10 and cl, byte ptr [eax+edx]
00446B13 8B85 ACFCFFFF mov eax, dword ptr [ebp-354]
00446B19 8808 mov byte ptr [eax], cl
00446B1B FF85 D0FCFFFF inc dword ptr [ebp-330]
00446B21 FF85 ACFCFFFF inc dword ptr [ebp-354]
00446B27 83BD D0FCFFFF 1>cmp dword ptr [ebp-330], 14
00446B2E ^ 7C C5 jl short <loc_446AF5>
00446B30 33DB xor ebx, ebx
00446B32 33C0 xor eax, eax
00446B34 8985 D0FCFFFF mov dword ptr [ebp-330], eax
00446B3A > 8B95 D0FCFFFF mov edx, dword ptr [ebp-330] ; 下面是把用户名与机器器运算得到的字串再进行运算
00446B40 0FBE8C15 6CF8FF>movsx ecx, byte ptr [ebp+edx-794]
00446B48 898D 28EFFFFF mov dword ptr [ebp-10D8], ecx
00446B4E DB85 28EFFFFF fild dword ptr [ebp-10D8]
00446B54 > 83C4 F8 add esp, -8
00446B57 DD1C24 fstp qword ptr [esp]
00446B5A E8 8D2D0F00 call <_fabs>
00446B5F 83C4 08 add esp, 8
00446B62 B8 14000000 mov eax, 14
00446B67 2B85 D0FCFFFF sub eax, dword ptr [ebp-330]
00446B6D 8985 24EFFFFF mov dword ptr [ebp-10DC], eax
00446B73 DB85 24EFFFFF fild dword ptr [ebp-10DC]
00446B79 DEC9 fmulp st(1), st(0)
00446B7B 899D 20EFFFFF mov dword ptr [ebp-10E0], ebx
00446B81 DB85 20EFFFFF fild dword ptr [ebp-10E0]
00446B87 DEC1 faddp st(1), st(0)
00446B89 E8 862D0F00 call <@_ftol$qv>
00446B8E 8BD8 mov ebx, eax
00446B90 FF85 D0FCFFFF inc dword ptr [ebp-330]
00446B96 83BD D0FCFFFF 1>cmp dword ptr [ebp-330], 14
00446B9D ^ 7C 9B jl short <loc_446B3A>
00446B9F 8BC3 mov eax, ebx ; 运算得A
00446BA1 B9 A0860100 mov ecx, 186A0
00446BA6 99 cdq
00446BA7 F7F9 idiv ecx
00446BA9 8995 24FDFFFF mov dword ptr [ebp-2DC], edx
00446BAF 81C3 31D40000 add ebx, 0D431 ; A+0D431
00446BB5 81E3 07000080 and ebx, 80000007 ; B=and A+0D431 ,80000007
00446BBB 79 05 jns short <loc_446BC2>
00446BBD 4B dec ebx
00446BBE 83CB F8 or ebx, FFFFFFF8
00446BC1 43 inc ebx
00446BC2 > 899D 28EFFFFF mov dword ptr [ebp-10D8], ebx
00446BC8 DB85 28EFFFFF fild dword ptr [ebp-10D8] ; B
00446BCE DB85 24FDFFFF fild dword ptr [ebp-2DC] ; 运算得A
00446BD4 DB2D 208A4400 fld tbyte ptr [<tbyte_448A20>]
00446BDA DEC9 fmulp st(1), st(0) ; C=A*8.10000000591
00446BDC 33C9 xor ecx, ecx
00446BDE > DEC1 faddp st(1), st(0) ; D=C+B
00446BE0 D99D 1CFDFFFF fstp dword ptr [ebp-2E4]
00446BE6 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446BEC 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
00446BF2 8B18 mov ebx, dword ptr [eax]
00446BF4 FF53 0C call dword ptr [ebx+C]
00446BF7 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446BFD 8D95 84F8FFFF lea edx, dword ptr [ebp-77C]
00446C03 B9 28000000 mov ecx, 28
00446C08 > 8B18 mov ebx, dword ptr [eax]
00446C0A FF53 04 call dword ptr [ebx+4]
00446C0D 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446C13 E8 30570D00 call <@Classes@TStream@GetPositio>
00446C18 > 83C0 28 add eax, 28
00446C1B 8985 58FDFFFF mov dword ptr [ebp-2A8], eax
00446C21 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
00446C27 80BA 30150000 0>cmp byte ptr [edx+1530], 0
00446C2E 75 52 jnz short <loc_446C82>
00446C30 66:C785 80FDFFF>mov word ptr [ebp-280], 3A4
00446C39 BA 66D65500 mov edx, 0055D666
00446C3E 8D85 58FEFFFF lea eax, dword ptr [ebp-1A8]
00446C44 > E8 9BA30F00 call <sub_540FE4>
00446C49 FF85 8CFDFFFF inc dword ptr [ebp-274]
00446C4F 8B00 mov eax, dword ptr [eax]
00446C51 E8 4E100B00 call <@Dialogs@ShowMessage$qqrx17>
00446C56 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446C5C 8D85 58FEFFFF lea eax, dword ptr [ebp-1A8]
00446C62 BA 02000000 mov edx, 2
00446C67 E8 24A60F00 call <sub_541290>
00446C6C 81BD 90F8FFFF F>cmp dword ptr [ebp-770], 1F4
00446C76 7E 0A jle short <loc_446C82>
00446C78 > C785 90F8FFFF F>mov dword ptr [ebp-770], 1F4
00446C82 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446C88 8D95 84F8FFFF lea edx, dword ptr [ebp-77C]
00446C8E B9 28000000 mov ecx, 28
00446C93 8B18 mov ebx, dword ptr [eax]
00446C95 FF53 08 call dword ptr [ebx+8]
00446C98 B9 78000000 mov ecx, 78
00446C9D 8B95 B8FCFFFF mov edx, dword ptr [ebp-348]
00446CA3 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446CA9 E8 5E570D00 call <unknown_libname_711>
00446CAE 8185 60FDFFFF A>add dword ptr [ebp-2A0], 0A0
00446CB8 66:C785 80FDFFF>mov word ptr [ebp-280], 3B0
00446CC1 BA 80D65500 mov edx, 0055D680
00446CC6 8D85 54FEFFFF lea eax, dword ptr [ebp-1AC]
00446CCC > E8 13A30F00 call <sub_540FE4>
00446CD1 FF85 8CFDFFFF inc dword ptr [ebp-274]
00446CD7 8B10 mov edx, dword ptr [eax]
00446CD9 A1 F0D65900 mov eax, dword ptr [59D6F0]
00446CDE 8B08 mov ecx, dword ptr [eax]
00446CE0 8B81 D4020000 mov eax, dword ptr [ecx+2D4]
00446CE6 E8 19640B00 call <@Controls@TControl@SetText$>
00446CEB FF8D 8CFDFFFF dec dword ptr [ebp-274]
00446CF1 8D85 54FEFFFF lea eax, dword ptr [ebp-1AC]
00446CF7 BA 02000000 mov edx, 2
00446CFC E8 8FA50F00 call <sub_541290>
00446D01 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446D07 8B95 90F8FFFF mov edx, dword ptr [ebp-770]
00446D0D 8B01 mov eax, dword ptr [ecx]
00446D0F 8B80 D0020000 mov eax, dword ptr [eax+2D0]
00446D15 E8 06AD0C00 call <@Comctrls@TProgressBar@SetM>
00446D1A 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446D20 33D2 xor edx, edx
00446D22 8B01 mov eax, dword ptr [ecx]
00446D24 > 8B80 D0020000 mov eax, dword ptr [eax+2D0]
00446D2A E8 01AD0C00 call <@Comctrls@TProgressBar@SetP>
00446D2F 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00446D35 8B01 mov eax, dword ptr [ecx]
00446D37 E8 74680B00 call <sub_4FD5B0>
00446D3C 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446D42 33C9 xor ecx, ecx
00446D44 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
00446D4A 8B18 mov ebx, dword ptr [eax]
00446D4C FF53 0C call dword ptr [ebx+C]
00446D4F 83BD A8F8FFFF 0>cmp dword ptr [ebp-758], 1
00446D56 0F85 21010000 jnz <loc_446E7D>
00446D5C 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446D62 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446D68 B9 04000000 mov ecx, 4
00446D6D 8B18 mov ebx, dword ptr [eax]
00446D6F FF53 04 call dword ptr [ebx+4]
00446D72 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446D78 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446D7E B9 04000000 mov ecx, 4
00446D83 8B18 mov ebx, dword ptr [eax]
00446D85 FF53 08 call dword ptr [ebx+8]
00446D88 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446D8E 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446D94 B9 04000000 mov ecx, 4
00446D99 8B18 mov ebx, dword ptr [eax]
00446D9B FF53 04 call dword ptr [ebx+4]
00446D9E 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446DA4 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446DAA B9 04000000 mov ecx, 4
00446DAF 8B18 mov ebx, dword ptr [eax]
00446DB1 FF53 08 call dword ptr [ebx+8]
00446DB4 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446DBA 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446DC0 B9 04000000 mov ecx, 4
00446DC5 8B18 mov ebx, dword ptr [eax]
00446DC7 FF53 04 call dword ptr [ebx+4]
00446DCA 83BD C8FCFFFF 0>cmp dword ptr [ebp-338], 0
00446DD1 7E 6C jle short <loc_446E3F>
00446DD3 8B95 B8FCFFFF mov edx, dword ptr [ebp-348]
00446DD9 8B85 FCFCFFFF mov eax, dword ptr [ebp-304]
00446DDF 8B08 mov ecx, dword ptr [eax]
00446DE1 FF51 50 call dword ptr [ecx+50]
00446DE4 > 8B85 F0FCFFFF mov eax, dword ptr [ebp-310]
00446DEA 50 push eax
00446DEB 8B85 FCFCFFFF mov eax, dword ptr [ebp-304]
00446DF1 E8 A6980900 call <@Graphics@TIcon@GetHandle$q>
00446DF6 50 push eax
00446DF7 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
00446DFD 52 push edx
00446DFE E8 89400000 call <sub_44AE8C>
00446E03 C785 D4FCFFFF 3>mov dword ptr [ebp-32C], 836
00446E0D 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446E13 83C4 0C add esp, 0C
00446E16 8D95 D4FCFFFF lea edx, dword ptr [ebp-32C]
00446E1C B9 04000000 mov ecx, 4
00446E21 8B18 mov ebx, dword ptr [eax]
00446E23 FF53 08 call dword ptr [ebx+8]
00446E26 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446E2C > 8B8D D4FCFFFF mov ecx, dword ptr [ebp-32C]
00446E32 8B95 F0FCFFFF mov edx, dword ptr [ebp-310]
00446E38 8B18 mov ebx, dword ptr [eax]
00446E3A FF53 08 call dword ptr [ebx+8]
00446E3D EB 16 jmp short <loc_446E55>
00446E3F > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446E45 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446E4B B9 04000000 mov ecx, 4
00446E50 8B18 mov ebx, dword ptr [eax]
00446E52 FF53 08 call dword ptr [ebx+8]
00446E55 > 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
00446E5B 0385 C8FCFFFF add eax, dword ptr [ebp-338]
00446E61 83C0 0C add eax, 0C
00446E64 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
00446E6A 33C9 xor ecx, ecx
00446E6C > 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
00446E72 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446E78 8B18 mov ebx, dword ptr [eax]
00446E7A FF53 0C call dword ptr [ebx+C]
00446E7D > 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446E83 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446E89 B9 04000000 mov ecx, 4
00446E8E 8B18 mov ebx, dword ptr [eax]
00446E90 FF53 04 call dword ptr [ebx+4]
00446E93 B2 01 mov dl, 1
00446E95 A1 58884D00 mov eax, dword ptr [<off_4D8858>>
00446E9A E8 457B0900 call <@Graphics@TBitmap@$bctr$qqr>
00446E9F 8985 F8FCFFFF mov dword ptr [ebp-308], eax
00446EA5 B2 01 mov dl, 1
00446EA7 A1 58884D00 mov eax, dword ptr [<off_4D8858>>
00446EAC > E8 337B0900 call <@Graphics@TBitmap@$bctr$qqr>
00446EB1 8985 F4FCFFFF mov dword ptr [ebp-30C], eax
00446EB7 B2 01 mov dl, 1
00446EB9 A1 2C895100 mov eax, dword ptr [<off_51892C>>
00446EBE E8 15440000 call <sub_44B2D8>
00446EC3 8985 E4FCFFFF mov dword ptr [ebp-31C], eax
00446EC9 FF85 BCFCFFFF inc dword ptr [ebp-344]
00446ECF 83BD D8FCFFFF 0>cmp dword ptr [ebp-328], 0
00446ED6 75 57 jnz short <loc_446F2F>
00446ED8 8B8D C8FCFFFF mov ecx, dword ptr [ebp-338]
00446EDE 51 push ecx
00446EDF E8 BCB00E00 call <@$bnwa$qui>
00446EE4 8BD8 mov ebx, eax
00446EE6 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00446EEC > 59 pop ecx
00446EED 8BD3 mov edx, ebx
00446EEF 8B30 mov esi, dword ptr [eax]
00446EF1 8B8D C8FCFFFF mov ecx, dword ptr [ebp-338]
00446EF7 FF56 04 call dword ptr [esi+4]
00446EFA 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446F00 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00446F06 B9 04000000 mov ecx, 4
00446F0B 8B30 mov esi, dword ptr [eax]
00446F0D FF56 08 call dword ptr [esi+8]
00446F10 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00446F16 8B8D C8FCFFFF mov ecx, dword ptr [ebp-338]
00446F1C 8BD3 mov edx, ebx
00446F1E 8B30 mov esi, dword ptr [eax]
00446F20 FF56 08 call dword ptr [esi+8]
00446F23 53 push ebx
00446F24 E8 9FAE0E00 call <__rtl_close>
00446F29 59 pop ecx
00446F2A E9 EF010000 jmp <loc_44711E>
00446F2F > 83BD D8FCFFFF 0>cmp dword ptr [ebp-328], 1
00446F36 0F8C E2010000 jl <loc_44711E>
00446F3C B2 01 mov dl, 1
00446F3E A1 DC8F5100 mov eax, dword ptr [<off_518FDC>>
00446F43 E8 68CDFBFF call <sub_403CB0>
00446F48 8BF0 mov esi, eax
00446F4A 8B85 D8FCFFFF mov eax, dword ptr [ebp-328]
00446F50 50 push eax
00446F51 8B95 C8FCFFFF mov edx, dword ptr [ebp-338]
00446F57 52 push edx
00446F58 8B8D B8FCFFFF mov ecx, dword ptr [ebp-348]
00446F5E 51 push ecx
00446F5F 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00446F65 50 push eax
00446F66 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
00446F6C 52 push edx
00446F6D E8 B6430000 call <sub_44B328>
00446F72 83C4 14 add esp, 14
00446F75 B2 01 mov dl, 1
00446F77 A1 58884D00 mov eax, dword ptr [<off_4D8858>>
00446F7C E8 637A0900 call <@Graphics@TBitmap@$bctr$qqr>
00446F81 8BD8 mov ebx, eax
00446F83 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00446F89 E8 A6800900 call <@Graphics@TBitmap@GetPixelF>
00446F8E 8BD0 mov edx, eax
00446F90 8BC3 mov eax, ebx
00446F92 E8 BD8F0900 call <@Graphics@TBitmap@SetPixelF>
00446F97 8BC3 mov eax, ebx
00446F99 E8 96800900 call <@Graphics@TBitmap@GetPixelF>
00446F9E 3C 05 cmp al, 5
00446FA0 75 09 jnz short <loc_446FAB>
00446FA2 B2 04 mov dl, 4
00446FA4 8BC3 mov eax, ebx
00446FA6 E8 A98F0900 call <@Graphics@TBitmap@SetPixelF>
00446FAB > 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00446FB1 8B10 mov edx, dword ptr [eax]
00446FB3 FF52 2C call dword ptr [edx+2C]
00446FB6 8BD0 mov edx, eax
00446FB8 8BC3 mov eax, ebx
00446FBA 8B08 mov ecx, dword ptr [eax]
00446FBC FF51 40 call dword ptr [ecx+40]
00446FBF 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00446FC5 8B10 mov edx, dword ptr [eax]
00446FC7 FF52 20 call dword ptr [edx+20]
00446FCA 8BD0 mov edx, eax
00446FCC 8BC3 mov eax, ebx
00446FCE 8B08 mov ecx, dword ptr [eax]
00446FD0 FF51 34 call dword ptr [ecx+34]
00446FD3 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00446FD9 50 push eax
00446FDA 8BC3 mov eax, ebx
00446FDC E8 6F7F0900 call <@Graphics@TBitmap@GetCanvas>
00446FE1 33C9 xor ecx, ecx
00446FE3 33D2 xor edx, edx
00446FE5 E8 B2340900 call <@Graphics@TCanvas@Draw$qqri>
00446FEA 8BD6 mov edx, esi
00446FEC > 8BC3 mov eax, ebx
00446FEE 8B08 mov ecx, dword ptr [eax]
00446FF0 FF51 54 call dword ptr [ecx+54]
00446FF3 33D2 xor edx, edx
00446FF5 8BC6 mov eax, esi
00446FF7 E8 5C530D00 call <unknown_libname_504>
00446FFC 899D 4CFEFFFF mov dword ptr [ebp-1B4], ebx
00447002 83BD 4CFEFFFF 0>cmp dword ptr [ebp-1B4], 0
00447009 74 30 je short <loc_44703B>
0044700B 8B8D 4CFEFFFF mov ecx, dword ptr [ebp-1B4]
00447011 8B01 mov eax, dword ptr [ecx]
00447013 8985 50FEFFFF mov dword ptr [ebp-1B0], eax
00447019 66:C785 80FDFFF>mov word ptr [ebp-280], 3C8
00447022 BA 03000000 mov edx, 3
00447027 8B85 4CFEFFFF mov eax, dword ptr [ebp-1B4]
0044702D 8B08 mov ecx, dword ptr [eax]
0044702F FF51 FC call dword ptr [ecx-4]
00447032 66:C785 80FDFFF>mov word ptr [ebp-280], 3BC
0044703B > 8BC6 mov eax, esi
0044703D E8 22530D00 call <@Classes@TStream@GetSize$qq>
00447042 8985 D4FCFFFF mov dword ptr [ebp-32C], eax
00447048 8D95 D4FCFFFF lea edx, dword ptr [ebp-32C]
0044704E B9 04000000 mov ecx, 4
00447053 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447059 8B18 mov ebx, dword ptr [eax]
0044705B FF53 08 call dword ptr [ebx+8]
0044705E 8B95 B4FCFFFF mov edx, dword ptr [ebp-34C]
00447064 8BC6 mov eax, esi
00447066 E8 45560D00 call <@Classes@TCustomMemoryStrea>
0044706B 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447071 33D2 xor edx, edx
00447073 66:B9 0200 mov cx, 2
00447077 8B18 mov ebx, dword ptr [eax]
00447079 FF53 0C call dword ptr [ebx+C]
0044707C 89B5 44FEFFFF mov dword ptr [ebp-1BC], esi
00447082 83BD 44FEFFFF 0>cmp dword ptr [ebp-1BC], 0
00447089 74 30 je short <loc_4470BB>
0044708B 8B85 44FEFFFF mov eax, dword ptr [ebp-1BC]
00447091 8B10 mov edx, dword ptr [eax]
00447093 8995 48FEFFFF mov dword ptr [ebp-1B8], edx
00447099 66:C785 80FDFFF>mov word ptr [ebp-280], 3E0
004470A2 BA 03000000 mov edx, 3
004470A7 8B85 44FEFFFF mov eax, dword ptr [ebp-1BC]
004470AD 8B08 mov ecx, dword ptr [eax]
004470AF FF51 FC call dword ptr [ecx-4]
004470B2 66:C785 80FDFFF>mov word ptr [ebp-280], 3D4
004470BB > 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
004470C1 E8 6E7F0900 call <@Graphics@TBitmap@GetPixelF>
004470C6 8BD0 mov edx, eax
004470C8 8B85 F4FCFFFF mov eax, dword ptr [ebp-30C]
004470CE E8 818E0900 call <@Graphics@TBitmap@SetPixelF>
004470D3 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
004470D9 8B10 mov edx, dword ptr [eax]
004470DB FF52 2C call dword ptr [edx+2C]
004470DE 8BD0 mov edx, eax
004470E0 8B85 F4FCFFFF mov eax, dword ptr [ebp-30C]
004470E6 8B08 mov ecx, dword ptr [eax]
004470E8 FF51 40 call dword ptr [ecx+40]
004470EB 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
004470F1 8B10 mov edx, dword ptr [eax]
004470F3 FF52 20 call dword ptr [edx+20]
004470F6 8BD0 mov edx, eax
004470F8 8B85 F4FCFFFF mov eax, dword ptr [ebp-30C]
004470FE 8B08 mov ecx, dword ptr [eax]
00447100 FF51 34 call dword ptr [ecx+34]
00447103 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447109 50 push eax
0044710A 8B85 F4FCFFFF mov eax, dword ptr [ebp-30C]
00447110 E8 3B7E0900 call <@Graphics@TBitmap@GetCanvas>
00447115 33C9 xor ecx, ecx
00447117 33D2 xor edx, edx
00447119 E8 7E330900 call <@Graphics@TCanvas@Draw$qqri>
0044711E > 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
00447124 0385 C8FCFFFF add eax, dword ptr [ebp-338]
0044712A 83C0 04 add eax, 4
0044712D 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
00447133 33C9 xor ecx, ecx
00447135 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
0044713B 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00447141 8B18 mov ebx, dword ptr [eax]
00447143 FF53 0C call dword ptr [ebx+C]
00447146 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
0044714C 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447152 B9 04000000 mov ecx, 4
00447157 8B18 mov ebx, dword ptr [eax]
00447159 FF53 04 call dword ptr [ebx+4]
0044715C 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447162 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447168 B9 04000000 mov ecx, 4
0044716D 8B18 mov ebx, dword ptr [eax]
0044716F FF53 08 call dword ptr [ebx+8]
00447172 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
00447178 83C0 04 add eax, 4
0044717B 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
00447181 33C9 xor ecx, ecx
00447183 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
00447189 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
0044718F 8B18 mov ebx, dword ptr [eax]
00447191 FF53 0C call dword ptr [ebx+C]
00447194 C785 CCFCFFFF 0>mov dword ptr [ebp-334], 2
0044719E C785 D0FCFFFF 0>mov dword ptr [ebp-330], 1
004471A8 E9 B20B0000 jmp <loc_447D5F>
004471AD > A1 A4D75900 mov eax, dword ptr [59D7A4]
004471B2 8B00 mov eax, dword ptr [eax]
004471B4 E8 33590A00 call <unknown_libname_274>
004471B9 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
004471BF 8B0A mov ecx, dword ptr [edx]
004471C1 8079 47 00 cmp byte ptr [ecx+47], 0
004471C5 0F85 EB010000 jnz <loc_4473B6>
004471CB 8B85 FCFCFFFF mov eax, dword ptr [ebp-304]
004471D1 8985 3CFEFFFF mov dword ptr [ebp-1C4], eax
004471D7 83BD 3CFEFFFF 0>cmp dword ptr [ebp-1C4], 0
004471DE 74 30 je short <loc_447210>
004471E0 8B95 3CFEFFFF mov edx, dword ptr [ebp-1C4]
004471E6 8B0A mov ecx, dword ptr [edx]
004471E8 898D 40FEFFFF mov dword ptr [ebp-1C0], ecx
004471EE 66:C785 80FDFFF>mov word ptr [ebp-280], 3F8
004471F7 BA 03000000 mov edx, 3
004471FC 8B85 3CFEFFFF mov eax, dword ptr [ebp-1C4]
00447202 8B08 mov ecx, dword ptr [eax]
00447204 FF51 FC call dword ptr [ecx-4]
00447207 66:C785 80FDFFF>mov word ptr [ebp-280], 3EC
00447210 > 8B85 F0FCFFFF mov eax, dword ptr [ebp-310]
00447216 50 push eax
00447217 E8 ACAB0E00 call <__rtl_close>
0044721C 59 pop ecx
0044721D 8B95 B8FCFFFF mov edx, dword ptr [ebp-348]
00447223 8995 34FEFFFF mov dword ptr [ebp-1CC], edx
00447229 83BD 34FEFFFF 0>cmp dword ptr [ebp-1CC], 0
00447230 74 30 je short <loc_447262>
00447232 8B8D 34FEFFFF mov ecx, dword ptr [ebp-1CC]
00447238 8B01 mov eax, dword ptr [ecx]
0044723A 8985 38FEFFFF mov dword ptr [ebp-1C8], eax
00447240 66:C785 80FDFFF>mov word ptr [ebp-280], 410
00447249 BA 03000000 mov edx, 3
0044724E 8B85 34FEFFFF mov eax, dword ptr [ebp-1CC]
00447254 8B08 mov ecx, dword ptr [eax]
00447256 FF51 FC call dword ptr [ecx-4]
00447259 66:C785 80FDFFF>mov word ptr [ebp-280], 404
00447262 > 8B95 B4FCFFFF mov edx, dword ptr [ebp-34C]
00447268 8995 2CFEFFFF mov dword ptr [ebp-1D4], edx
0044726E 83BD 2CFEFFFF 0>cmp dword ptr [ebp-1D4], 0
00447275 74 30 je short <loc_4472A7>
00447277 8B85 2CFEFFFF mov eax, dword ptr [ebp-1D4]
0044727D 8B10 mov edx, dword ptr [eax]
0044727F 8995 30FEFFFF mov dword ptr [ebp-1D0], edx
00447285 66:C785 80FDFFF>mov word ptr [ebp-280], 428
0044728E BA 03000000 mov edx, 3
00447293 8B85 2CFEFFFF mov eax, dword ptr [ebp-1D4]
00447299 8B08 mov ecx, dword ptr [eax]
0044729B FF51 FC call dword ptr [ecx-4]
0044729E 66:C785 80FDFFF>mov word ptr [ebp-280], 41C
004472A7 > 8D85 4CF4FFFF lea eax, dword ptr [ebp-BB4]
004472AD 50 push eax
004472AE E8 0DE51000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
004472B3 66:C785 80FDFFF>mov word ptr [ebp-280], 434
004472BC 8D85 28FEFFFF lea eax, dword ptr [ebp-1D8]
004472C2 E8 91A6FBFF call <unknown_libname_55>
004472C7 8BD0 mov edx, eax
004472C9 FF85 8CFDFFFF inc dword ptr [ebp-274]
004472CF 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
004472D5 8B81 7C030000 mov eax, dword ptr [ecx+37C]
004472DB E8 F45D0B00 call <@TControl@GetText$qqrv>
004472E0 8D95 28FEFFFF lea edx, dword ptr [ebp-1D8]
004472E6 8D85 20FEFFFF lea eax, dword ptr [ebp-1E0]
004472EC 52 push edx
004472ED E8 66A6FBFF call <unknown_libname_55>
004472F2 50 push eax
004472F3 FF85 8CFDFFFF inc dword ptr [ebp-274]
004472F9 BA 96D65500 mov edx, 0055D696 ; ASCII "lsfalsh.tmp"
004472FE 8D85 24FEFFFF lea eax, dword ptr [ebp-1DC]
00447304 E8 DB9C0F00 call <sub_540FE4>
00447309 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044730F 8D95 24FEFFFF lea edx, dword ptr [ebp-1DC]
00447315 59 pop ecx
00447316 58 pop eax
00447317 E8 CC9F0F00 call <@System@AnsiString@$badd$xq>
0044731C 8D85 20FEFFFF lea eax, dword ptr [ebp-1E0]
00447322 8B00 mov eax, dword ptr [eax]
00447324 E8 B39C0F00 call <j_unknown_libname_576>
00447329 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044732F 8D85 20FEFFFF lea eax, dword ptr [ebp-1E0]
00447335 BA 02000000 mov edx, 2
0044733A E8 519F0F00 call <sub_541290>
0044733F FF8D 8CFDFFFF dec dword ptr [ebp-274]
00447345 8D85 24FEFFFF lea eax, dword ptr [ebp-1DC]
0044734B BA 02000000 mov edx, 2
00447350 E8 3B9F0F00 call <sub_541290>
00447355 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044735B 8D85 28FEFFFF lea eax, dword ptr [ebp-1D8]
00447361 BA 02000000 mov edx, 2
00447366 E8 259F0F00 call <sub_541290>
0044736B FF8D 8CFDFFFF dec dword ptr [ebp-274]
00447371 8D45 F4 lea eax, dword ptr [ebp-C]
00447374 BA 02000000 mov edx, 2
00447379 E8 129F0F00 call <sub_541290>
0044737E FF8D 8CFDFFFF dec dword ptr [ebp-274]
00447384 8D45 F8 lea eax, dword ptr [ebp-8]
00447387 BA 02000000 mov edx, 2
0044738C E8 FF9E0F00 call <sub_541290>
00447391 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00447397 8D45 FC lea eax, dword ptr [ebp-4]
0044739A BA 02000000 mov edx, 2
0044739F E8 EC9E0F00 call <sub_541290>
004473A4 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
004473AA 64:890D 0000000>mov dword ptr fs:[0], ecx
004473B1 E9 5A160000 jmp <loc_448A10>
004473B6 > A1 F0D65900 mov eax, dword ptr [59D6F0]
004473BB 8B10 mov edx, dword ptr [eax]
004473BD 8B82 D0020000 mov eax, dword ptr [edx+2D0]
004473C3 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
004473C9 E8 62A60C00 call <@Comctrls@TProgressBar@SetP>
004473CE 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
004473D4 8B01 mov eax, dword ptr [ecx]
004473D6 E8 D5610B00 call <sub_4FD5B0>
004473DB 83BD A8F8FFFF 0>cmp dword ptr [ebp-758], 1
004473E2 0F85 51010000 jnz <loc_447539>
004473E8 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004473EE 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
004473F4 B9 04000000 mov ecx, 4
004473F9 8B18 mov ebx, dword ptr [eax]
004473FB FF53 04 call dword ptr [ebx+4]
004473FE 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447404 8B9D C8FCFFFF mov ebx, dword ptr [ebp-338]
0044740A 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447410 B9 04000000 mov ecx, 4
00447415 > 8B30 mov esi, dword ptr [eax]
00447417 FF56 08 call dword ptr [esi+8]
0044741A 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00447420 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447426 > B9 04000000 mov ecx, 4
0044742B 8B30 mov esi, dword ptr [eax]
0044742D FF56 04 call dword ptr [esi+4]
00447430 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447436 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
0044743C B9 04000000 mov ecx, 4
00447441 8B30 mov esi, dword ptr [eax]
00447443 > FF56 08 call dword ptr [esi+8]
00447446 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
0044744C 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447452 B9 04000000 mov ecx, 4
00447457 8B30 mov esi, dword ptr [eax]
00447459 FF56 04 call dword ptr [esi+4]
0044745C 83BD C8FCFFFF 0>cmp dword ptr [ebp-338], 0
00447463 7E 6C jle short <loc_4474D1>
00447465 8B95 B8FCFFFF mov edx, dword ptr [ebp-348]
0044746B 8B85 FCFCFFFF mov eax, dword ptr [ebp-304]
00447471 8B08 mov ecx, dword ptr [eax]
00447473 FF51 50 call dword ptr [ecx+50]
00447476 8B85 F0FCFFFF mov eax, dword ptr [ebp-310]
0044747C 50 push eax
0044747D 8B85 FCFCFFFF mov eax, dword ptr [ebp-304]
00447483 E8 14920900 call <@Graphics@TIcon@GetHandle$q>
00447488 50 push eax
00447489 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
0044748F 52 push edx
00447490 E8 F7390000 call <sub_44AE8C>
00447495 C785 D4FCFFFF 3>mov dword ptr [ebp-32C], 836
0044749F 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004474A5 83C4 0C add esp, 0C
004474A8 8D95 D4FCFFFF lea edx, dword ptr [ebp-32C]
004474AE B9 04000000 mov ecx, 4
004474B3 8B30 mov esi, dword ptr [eax]
004474B5 FF56 08 call dword ptr [esi+8]
004474B8 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004474BE 8B8D D4FCFFFF mov ecx, dword ptr [ebp-32C]
004474C4 8B95 F0FCFFFF mov edx, dword ptr [ebp-310]
004474CA 8B30 mov esi, dword ptr [eax]
004474CC FF56 08 call dword ptr [esi+8]
004474CF EB 16 jmp short <loc_4474E7>
004474D1 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004474D7 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
004474DD B9 04000000 mov ecx, 4
004474E2 8B30 mov esi, dword ptr [eax]
004474E4 FF56 08 call dword ptr [esi+8]
004474E7 > 8D83 F5010000 lea eax, dword ptr [ebx+1F5]
004474ED 3B85 D0FCFFFF cmp eax, dword ptr [ebp-330]
004474F3 7D 1C jge short <loc_447511>
004474F5 8BC3 mov eax, ebx
004474F7 B9 32000000 mov ecx, 32
004474FC 99 cdq
004474FD F7F9 idiv ecx
004474FF 83FA 02 cmp edx, 2
00447502 75 0D jnz short <loc_447511>
00447504 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
0044750A 50 push eax
0044750B E8 04420000 call <sub_44B714>
00447510 59 pop ecx
00447511 > 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
00447517 0395 C8FCFFFF add edx, dword ptr [ebp-338]
0044751D 83C2 0C add edx, 0C
00447520 8995 60FDFFFF mov dword ptr [ebp-2A0], edx
00447526 33C9 xor ecx, ecx
00447528 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
0044752E 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00447534 8B18 mov ebx, dword ptr [eax]
00447536 FF53 0C call dword ptr [ebx+C]
00447539 > 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
0044753F 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447545 B9 04000000 mov ecx, 4
0044754A 8B18 mov ebx, dword ptr [eax]
0044754C FF53 04 call dword ptr [ebx+4]
0044754F 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
00447555 83C0 04 add eax, 4
00447558 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
0044755E 83BD C8FCFFFF 0>cmp dword ptr [ebp-338], 0
00447565 0F8E CA070000 jle <loc_447D35>
0044756B 83BD C8FCFFFF 0>cmp dword ptr [ebp-338], 0
00447572 0F8C C0010000 jl <off_59D738>
00447578 > 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
0044757E 8D95 5CF8FFFF lea edx, dword ptr [ebp-7A4]
00447584 B9 10000000 mov ecx, 10
00447589 8B18 mov ebx, dword ptr [eax]
0044758B FF53 04 call dword ptr [ebx+4]
0044758E 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
00447594 83C0 10 add eax, 10
00447597 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
0044759D 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
004475A3 B9 04000000 mov ecx, 4
004475A8 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004475AE 8B18 mov ebx, dword ptr [eax]
004475B0 FF53 04 call dword ptr [ebx+4]
004475B3 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
004475B9 83C0 04 add eax, 4
004475BC 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
004475C2 83BD D8FCFFFF 0>cmp dword ptr [ebp-328], 0
004475C9 75 6D jnz short <loc_447638>
004475CB 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004475D1 8D95 5CF8FFFF lea edx, dword ptr [ebp-7A4]
004475D7 B9 10000000 mov ecx, 10
004475DC 8B18 mov ebx, dword ptr [eax]
004475DE FF53 08 call dword ptr [ebx+8]
004475E1 8B85 C8FCFFFF mov eax, dword ptr [ebp-338]
004475E7 50 push eax
004475E8 E8 B3A90E00 call <@$bnwa$qui>
004475ED 8BD8 mov ebx, eax
004475EF 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
004475F5 59 pop ecx
004475F6 8BD3 mov edx, ebx
004475F8 8B30 mov esi, dword ptr [eax]
004475FA 8B8D C8FCFFFF mov ecx, dword ptr [ebp-338]
00447600 FF56 04 call dword ptr [esi+4]
00447603 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447609 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
0044760F B9 04000000 mov ecx, 4
00447614 8B30 mov esi, dword ptr [eax]
00447616 FF56 08 call dword ptr [esi+8]
00447619 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
0044761F 8B8D C8FCFFFF mov ecx, dword ptr [ebp-338]
00447625 8BD3 mov edx, ebx
00447627 8B30 mov esi, dword ptr [eax]
00447629 FF56 08 call dword ptr [esi+8]
0044762C 53 push ebx
0044762D E8 96A70E00 call <__rtl_close>
00447632 59 pop ecx
00447633 E9 AF000000 jmp <loc_4476E7>
00447638 > 83BD D8FCFFFF 0>cmp dword ptr [ebp-328], 1
0044763F 0F8C A2000000 jl <loc_4476E7>
00447645 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
0044764B E8 E4790900 call <@Graphics@TBitmap@GetPixelF>
00447650 3C 05 cmp al, 5
00447652 0F85 8F000000 jnz <loc_4476E7>
00447658 > B2 01 mov dl, 1
0044765A A1 58884D00 mov eax, dword ptr [<off_4D8858>>
0044765F E8 80730900 call <@Graphics@TBitmap@$bctr$qqr>
00447664 8BD8 mov ebx, eax
00447666 8B85 D8FCFFFF mov eax, dword ptr [ebp-328]
0044766C 50 push eax
0044766D 8B95 C8FCFFFF mov edx, dword ptr [ebp-338]
00447673 52 push edx
00447674 8B8D B8FCFFFF mov ecx, dword ptr [ebp-348]
0044767A 51 push ecx
0044767B 53 push ebx
0044767C 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00447682 50 push eax
00447683 E8 A03C0000 call <sub_44B328>
00447688 83C4 14 add esp, 14
0044768B 53 push ebx
0044768C 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447692 E8 B9780900 call <@Graphics@TBitmap@GetCanvas>
00447697 8B8D 60F8FFFF mov ecx, dword ptr [ebp-7A0]
0044769D 8B95 5CF8FFFF mov edx, dword ptr [ebp-7A4]
004476A3 E8 F42D0900 call <@Graphics@TCanvas@Draw$qqri>
004476A8 899D 18FEFFFF mov dword ptr [ebp-1E8], ebx
004476AE 83BD 18FEFFFF 0>cmp dword ptr [ebp-1E8], 0
004476B5 74 30 je short <loc_4476E7>
004476B7 8B85 18FEFFFF mov eax, dword ptr [ebp-1E8]
004476BD 8B10 mov edx, dword ptr [eax]
004476BF 8995 1CFEFFFF mov dword ptr [ebp-1E4], edx
004476C5 66:C785 80FDFFF>mov word ptr [ebp-280], 44C
004476CE BA 03000000 mov edx, 3
004476D3 8B85 18FEFFFF mov eax, dword ptr [ebp-1E8]
004476D9 8B08 mov ecx, dword ptr [eax]
004476DB FF51 FC call dword ptr [ecx-4]
004476DE 66:C785 80FDFFF>mov word ptr [ebp-280], 440
004476E7 > 8B85 C8FCFFFF mov eax, dword ptr [ebp-338]
004476ED 0185 60FDFFFF add dword ptr [ebp-2A0], eax
004476F3 33C9 xor ecx, ecx
004476F5 8B95 60FDFFFF mov edx, dword ptr [ebp-2A0]
004476FB 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
00447701 8B18 mov ebx, dword ptr [eax]
00447703 FF53 0C call dword ptr [ebx+C]
00447706 8B85 B8FCFFFF mov eax, dword ptr [ebp-348]
0044770C > 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447712 B9 04000000 mov ecx, 4
00447717 8B18 mov ebx, dword ptr [eax]
00447719 FF53 04 call dword ptr [ebx+4]
0044771C > 8B85 60FDFFFF mov eax, dword ptr [ebp-2A0]
00447722 83C0 04 add eax, 4
00447725 8985 60FDFFFF mov dword ptr [ebp-2A0], eax
0044772B 83BD C8FCFFFF 0>cmp dword ptr [ebp-338], 0
00447732 ^ 0F8D 40FEFFFF jge <loc_447578>
00447738 > 8B95 E4FCFFFF mov edx, dword ptr [ebp-31C]
0044773E 52 push edx
0044773F 8B8D F4FCFFFF mov ecx, dword ptr [ebp-30C]
00447745 51 push ecx
00447746 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
0044774C > 50 push eax
0044774D 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
00447753 52 push edx
00447754 > E8 9FC8FBFF call <sub_403FF8>
00447759 83C4 10 add esp, 10
0044775C > 40 inc eax
0044775D 75 5C jnz short <loc_4477BB>
0044775F 6A 10 push 10
00447761 E8 96A60E00 call <@$bnew$qui>
00447766 59 pop ecx
00447767 8985 E8FCFFFF mov dword ptr [ebp-318], eax
0044776D 8B8D E8FCFFFF mov ecx, dword ptr [ebp-318]
00447773 33C0 xor eax, eax
00447775 8901 mov dword ptr [ecx], eax
00447777 8B95 E8FCFFFF mov edx, dword ptr [ebp-318]
0044777D 33C9 xor ecx, ecx
0044777F 894A 04 mov dword ptr [edx+4], ecx
00447782 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447788 > 8B10 mov edx, dword ptr [eax]
0044778A FF52 2C call dword ptr [edx+2C]
0044778D 8B8D E8FCFFFF mov ecx, dword ptr [ebp-318]
00447793 8941 08 mov dword ptr [ecx+8], eax
00447796 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
0044779C > 8B10 mov edx, dword ptr [eax]
0044779E FF52 20 call dword ptr [edx+20]
004477A1 8B8D E8FCFFFF mov ecx, dword ptr [ebp-318]
004477A7 8941 0C mov dword ptr [ecx+C], eax
004477AA 8B95 E8FCFFFF mov edx, dword ptr [ebp-318]
004477B0 > 8B85 E4FCFFFF mov eax, dword ptr [ebp-31C]
004477B6 E8 91270D00 call <@Classes@TList@Add$qqrpv>
004477BB > 8B8D F8FCFFFF mov ecx, dword ptr [ebp-308]
004477C1 51 push ecx
004477C2 8B85 F4FCFFFF mov eax, dword ptr [ebp-30C]
004477C8 > E8 83770900 call <@Graphics@TBitmap@GetCanvas>
004477CD 33C9 xor ecx, ecx
004477CF 33D2 xor edx, edx
004477D1 E8 C62C0900 call <@Graphics@TCanvas@Draw$qqri>
004477D6 33C0 xor eax, eax
004477D8 > 8985 D4FCFFFF mov dword ptr [ebp-32C], eax
004477DE E9 32050000 jmp <loc_447D15>
004477E3 > 8B95 D4FCFFFF mov edx, dword ptr [ebp-32C]
004477E9 8B85 E4FCFFFF mov eax, dword ptr [ebp-31C]
004477EF E8 B4280D00 call <@Classes@TList@Get$qqri>
004477F4 > 8BF0 mov esi, eax
004477F6 8DBD 5CF8FFFF lea edi, dword ptr [ebp-7A4]
004477FC > B9 04000000 mov ecx, 4
00447801 F3:A5 rep movs dword ptr es:[edi], dwo>
00447803 8B85 64F8FFFF mov eax, dword ptr [ebp-79C]
00447809 2B85 5CF8FFFF sub eax, dword ptr [ebp-7A4]
0044780F 25 01000080 and eax, 80000001
00447814 > 79 05 jns short <loc_44781B>
00447816 48 dec eax
00447817 83C8 FE or eax, FFFFFFFE
0044781A 40 inc eax
0044781B > 85C0 test eax, eax
0044781D 74 22 je short <loc_447841>
0044781F 8B95 64F8FFFF mov edx, dword ptr [ebp-79C]
00447825 2B95 5CF8FFFF sub edx, dword ptr [ebp-7A4]
0044782B 42 inc edx
0044782C > D1FA sar edx, 1
0044782E 79 03 jns short <loc_447833>
00447830 > 83D2 00 adc edx, 0
00447833 > 03D2 add edx, edx
00447835 0395 5CF8FFFF add edx, dword ptr [ebp-7A4]
0044783B 8995 64F8FFFF mov dword ptr [ebp-79C], edx
00447841 > 33C9 xor ecx, ecx
00447843 33C0 xor eax, eax
00447845 898D 4CF8FFFF mov dword ptr [ebp-7B4], ecx
0044784B 8985 50F8FFFF mov dword ptr [ebp-7B0], eax
00447851 8B95 64F8FFFF mov edx, dword ptr [ebp-79C]
00447857 A1 DC8F5100 mov eax, dword ptr [<off_518FDC>>
0044785C > 2B95 5CF8FFFF sub edx, dword ptr [ebp-7A4]
00447862 8995 54F8FFFF mov dword ptr [ebp-7AC], edx
00447868 > B2 01 mov dl, 1
0044786A 8B8D 68F8FFFF mov ecx, dword ptr [ebp-798]
00447870 > 2B8D 60F8FFFF sub ecx, dword ptr [ebp-7A0]
00447876 898D 58F8FFFF mov dword ptr [ebp-7A8], ecx
0044787C > E8 2FC4FBFF call <sub_403CB0>
00447881 8BF0 mov esi, eax
00447883 B2 01 mov dl, 1
00447885 A1 58884D00 mov eax, dword ptr [<off_4D8858>>
0044788A E8 55710900 call <@Graphics@TBitmap@$bctr$qqr>
0044788F 8BD8 mov ebx, eax
00447891 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447897 E8 98770900 call <@Graphics@TBitmap@GetPixelF>
0044789C > 8BD0 mov edx, eax
0044789E 8BC3 mov eax, ebx
004478A0 > E8 AF860900 call <@Graphics@TBitmap@SetPixelF>
004478A5 8BC3 mov eax, ebx
004478A7 E8 88770900 call <@Graphics@TBitmap@GetPixelF>
004478AC > 3C 05 cmp al, 5
004478AE 75 09 jnz short <loc_4478B9>
004478B0 > B2 04 mov dl, 4
004478B2 8BC3 mov eax, ebx
004478B4 > E8 9B860900 call <@Graphics@TBitmap@SetPixelF>
004478B9 > 8B95 54F8FFFF mov edx, dword ptr [ebp-7AC]
004478BF 8BC3 mov eax, ebx
004478C1 8B08 mov ecx, dword ptr [eax]
004478C3 FF51 40 call dword ptr [ecx+40]
004478C6 8B95 58F8FFFF mov edx, dword ptr [ebp-7A8]
004478CC > 8BC3 mov eax, ebx
004478CE 8B08 mov ecx, dword ptr [eax]
004478D0 > FF51 34 call dword ptr [ecx+34]
004478D3 8B95 54F8FFFF mov edx, dword ptr [ebp-7AC]
004478D9 52 push edx
004478DA 8B85 58F8FFFF mov eax, dword ptr [ebp-7A8]
004478E0 > 50 push eax
004478E1 8BC3 mov eax, ebx
004478E3 E8 68760900 call <@Graphics@TBitmap@GetCanvas>
004478E8 > 33C9 xor ecx, ecx
004478EA 33D2 xor edx, edx
004478EC > E8 DB2D0900 call <unknown_libname_201>
004478F1 8BC3 mov eax, ebx
004478F3 E8 58760900 call <@Graphics@TBitmap@GetCanvas>
004478F8 > C740 20 2000CC0>mov dword ptr [eax+20], 0CC0020
004478FF 8D95 5CF8FFFF lea edx, dword ptr [ebp-7A4]
00447905 52 push edx
00447906 8D8D 4CEFFFFF lea ecx, dword ptr [ebp-10B4]
0044790C > 51 push ecx
0044790D E8 CA63FFFF call <sub_43DCDC>
00447912 83C4 08 add esp, 8
00447915 8D85 4CEFFFFF lea eax, dword ptr [ebp-10B4]
0044791B 50 push eax
0044791C > 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447922 E8 29760900 call <@Graphics@TBitmap@GetCanvas>
00447927 50 push eax
00447928 > 8D95 4CF8FFFF lea edx, dword ptr [ebp-7B4]
0044792E 52 push edx
0044792F 8D8D 5CEFFFFF lea ecx, dword ptr [ebp-10A4]
00447935 51 push ecx
00447936 E8 A163FFFF call <sub_43DCDC>
0044793B 83C4 08 add esp, 8
0044793E 8D85 5CEFFFFF lea eax, dword ptr [ebp-10A4]
00447944 > 50 push eax
00447945 8BC3 mov eax, ebx
00447947 E8 04760900 call <@Graphics@TBitmap@GetCanvas>
0044794C > 5A pop edx
0044794D 59 pop ecx
0044794E E8 C12A0900 call <@Graphics@TCanvas@CopyRect$>
00447953 8BD6 mov edx, esi
00447955 8BC3 mov eax, ebx
00447957 8B08 mov ecx, dword ptr [eax]
00447959 FF51 54 call dword ptr [ecx+54]
0044795C > 899D 10FEFFFF mov dword ptr [ebp-1F0], ebx
00447962 83BD 10FEFFFF 0>cmp dword ptr [ebp-1F0], 0
00447969 74 30 je short <loc_44799B>
0044796B 8B85 10FEFFFF mov eax, dword ptr [ebp-1F0]
00447971 8B10 mov edx, dword ptr [eax]
00447973 8995 14FEFFFF mov dword ptr [ebp-1EC], edx
00447979 66:C785 80FDFFF>mov word ptr [ebp-280], 464
00447982 BA 03000000 mov edx, 3
00447987 8B85 10FEFFFF mov eax, dword ptr [ebp-1F0]
0044798D 8B08 mov ecx, dword ptr [eax]
0044798F FF51 FC call dword ptr [ecx-4]
00447992 66:C785 80FDFFF>mov word ptr [ebp-280], 458
0044799B > 33D2 xor edx, edx
0044799D 8BC6 mov eax, esi
0044799F E8 B4490D00 call <unknown_libname_504>
004479A4 > 6A 01 push 1
004479A6 56 push esi
004479A7 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
004479AD 51 push ecx
004479AE E8 493E0000 call <sub_44B7FC>
004479B3 83C4 0C add esp, 0C
004479B6 3D 2C010000 cmp eax, 12C
004479BB 0F8D 84020000 jge <loc_447C45>
004479C1 E9 64020000 jmp <loc_447C2A>
004479C6 > 8385 5CF8FFFF E>add dword ptr [ebp-7A4], -14
004479CD 8385 60F8FFFF E>add dword ptr [ebp-7A0], -14
004479D4 > 8385 64F8FFFF 1>add dword ptr [ebp-79C], 14
004479DB 8385 68F8FFFF 1>add dword ptr [ebp-798], 14
004479E2 83BD 5CF8FFFF 0>cmp dword ptr [ebp-7A4], 0
004479E9 7D 08 jge short <loc_4479F3>
004479EB 33C0 xor eax, eax
004479ED 8985 5CF8FFFF mov dword ptr [ebp-7A4], eax
004479F3 > 83BD 60F8FFFF 0>cmp dword ptr [ebp-7A0], 0
004479FA 7D 08 jge short <off_59DA04>
004479FC > 33D2 xor edx, edx
004479FE 8995 60F8FFFF mov dword ptr [ebp-7A0], edx
00447A04 > 8B8D 88F8FFFF mov ecx, dword ptr [ebp-778]
00447A0A 3B8D 64F8FFFF cmp ecx, dword ptr [ebp-79C]
00447A10 > 7D 0C jge short <loc_447A1E>
00447A12 8B85 88F8FFFF mov eax, dword ptr [ebp-778]
00447A18 > 8985 64F8FFFF mov dword ptr [ebp-79C], eax
00447A1E > 8B95 8CF8FFFF mov edx, dword ptr [ebp-774]
00447A24 > 3B95 68F8FFFF cmp edx, dword ptr [ebp-798]
00447A2A 7D 0C jge short <off_59DA38>
00447A2C > 8B8D 8CF8FFFF mov ecx, dword ptr [ebp-774]
00447A32 898D 68F8FFFF mov dword ptr [ebp-798], ecx
00447A38 > 8B85 64F8FFFF mov eax, dword ptr [ebp-79C]
00447A3E 2B85 5CF8FFFF sub eax, dword ptr [ebp-7A4]
00447A44 > 40 inc eax
00447A45 D1F8 sar eax, 1
00447A47 79 03 jns short <off_59DA4C>
00447A49 83D0 00 adc eax, 0
00447A4C > 03C0 add eax, eax
00447A4E 33D2 xor edx, edx
00447A50 > 0385 5CF8FFFF add eax, dword ptr [ebp-7A4]
00447A56 33C9 xor ecx, ecx
00447A58 > 8985 64F8FFFF mov dword ptr [ebp-79C], eax
00447A5E 8995 4CF8FFFF mov dword ptr [ebp-7B4], edx
00447A64 > 898D 50F8FFFF mov dword ptr [ebp-7B0], ecx
00447A6A 8B85 64F8FFFF mov eax, dword ptr [ebp-79C]
00447A70 > 2B85 5CF8FFFF sub eax, dword ptr [ebp-7A4]
00447A76 8985 54F8FFFF mov dword ptr [ebp-7AC], eax
00447A7C > A1 58884D00 mov eax, dword ptr [<off_4D8858>>
00447A81 8B95 68F8FFFF mov edx, dword ptr [ebp-798]
00447A87 2B95 60F8FFFF sub edx, dword ptr [ebp-7A0]
00447A8D 8995 58F8FFFF mov dword ptr [ebp-7A8], edx
00447A93 B2 01 mov dl, 1
00447A95 E8 4A6F0900 call <@Graphics@TBitmap@$bctr$qqr>
00447A9A 8BD8 mov ebx, eax
00447A9C > 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447AA2 E8 8D750900 call <@Graphics@TBitmap@GetPixelF>
00447AA7 8BD0 mov edx, eax
00447AA9 8BC3 mov eax, ebx
00447AAB E8 A4840900 call <@Graphics@TBitmap@SetPixelF>
00447AB0 > 8BC3 mov eax, ebx
00447AB2 E8 7D750900 call <@Graphics@TBitmap@GetPixelF>
00447AB7 3C 05 cmp al, 5
00447AB9 75 09 jnz short <off_59DAC4>
00447ABB B2 04 mov dl, 4
00447ABD 8BC3 mov eax, ebx
00447ABF E8 90840900 call <@Graphics@TBitmap@SetPixelF>
00447AC4 > 8B95 54F8FFFF mov edx, dword ptr [ebp-7AC]
00447ACA 8BC3 mov eax, ebx
00447ACC > 8B08 mov ecx, dword ptr [eax]
00447ACE FF51 40 call dword ptr [ecx+40]
00447AD1 8B95 58F8FFFF mov edx, dword ptr [ebp-7A8]
00447AD7 8BC3 mov eax, ebx
00447AD9 8B08 mov ecx, dword ptr [eax]
00447ADB FF51 34 call dword ptr [ecx+34]
00447ADE 8B95 54F8FFFF mov edx, dword ptr [ebp-7AC]
00447AE4 > 52 push edx
00447AE5 8B85 58F8FFFF mov eax, dword ptr [ebp-7A8]
00447AEB 50 push eax
00447AEC > 8BC3 mov eax, ebx
00447AEE E8 5D740900 call <@Graphics@TBitmap@GetCanvas>
00447AF3 33C9 xor ecx, ecx
00447AF5 33D2 xor edx, edx
00447AF7 E8 D02B0900 call <unknown_libname_201>
00447AFC > 8BC3 mov eax, ebx
00447AFE E8 4D740900 call <@Graphics@TBitmap@GetCanvas>
00447B03 C740 20 2000CC0>mov dword ptr [eax+20], 0CC0020
00447B0A 8D95 5CF8FFFF lea edx, dword ptr [ebp-7A4]
00447B10 > 52 push edx
00447B11 8D8D 2CEFFFFF lea ecx, dword ptr [ebp-10D4]
00447B17 51 push ecx
00447B18 > E8 BF61FFFF call <sub_43DCDC>
00447B1D 83C4 08 add esp, 8
00447B20 > 8D85 2CEFFFFF lea eax, dword ptr [ebp-10D4]
00447B26 50 push eax
00447B27 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447B2D E8 1E740900 call <@Graphics@TBitmap@GetCanvas>
00447B32 50 push eax
00447B33 8D95 4CF8FFFF lea edx, dword ptr [ebp-7B4]
00447B39 52 push edx
00447B3A 8D8D 3CEFFFFF lea ecx, dword ptr [ebp-10C4]
00447B40 > 51 push ecx
00447B41 E8 9661FFFF call <sub_43DCDC>
00447B46 83C4 08 add esp, 8
00447B49 8D85 3CEFFFFF lea eax, dword ptr [ebp-10C4]
00447B4F 50 push eax
00447B50 > 8BC3 mov eax, ebx
00447B52 E8 F9730900 call <@Graphics@TBitmap@GetCanvas>
00447B57 5A pop edx
00447B58 > 59 pop ecx
00447B59 E8 B6280900 call <@Graphics@TCanvas@CopyRect$>
00447B5E 89B5 08FEFFFF mov dword ptr [ebp-1F8], esi
00447B64 > 83BD 08FEFFFF 0>cmp dword ptr [ebp-1F8], 0
00447B6B 74 30 je short <loc_447B9D>
00447B6D 8B85 08FEFFFF mov eax, dword ptr [ebp-1F8]
00447B73 8B10 mov edx, dword ptr [eax]
00447B75 8995 0CFEFFFF mov dword ptr [ebp-1F4], edx
00447B7B 66:C785 80FDFFF>mov word ptr [ebp-280], 47C
00447B84 > BA 03000000 mov edx, 3
00447B89 8B85 08FEFFFF mov eax, dword ptr [ebp-1F8]
00447B8F 8B08 mov ecx, dword ptr [eax]
00447B91 FF51 FC call dword ptr [ecx-4]
00447B94 > 66:C785 80FDFFF>mov word ptr [ebp-280], 470
00447B9D > B2 01 mov dl, 1
00447B9F A1 DC8F5100 mov eax, dword ptr [<off_518FDC>>
00447BA4 > E8 07C1FBFF call <sub_403CB0>
00447BA9 8BF0 mov esi, eax
00447BAB 8BC3 mov eax, ebx
00447BAD 8BD6 mov edx, esi
00447BAF 8B08 mov ecx, dword ptr [eax]
00447BB1 FF51 54 call dword ptr [ecx+54]
00447BB4 > 899D 00FEFFFF mov dword ptr [ebp-200], ebx
00447BBA 83BD 00FEFFFF 0>cmp dword ptr [ebp-200], 0
00447BC1 74 30 je short <loc_447BF3>
00447BC3 8B85 00FEFFFF mov eax, dword ptr [ebp-200]
00447BC9 8B10 mov edx, dword ptr [eax]
00447BCB 8995 04FEFFFF mov dword ptr [ebp-1FC], edx
00447BD1 66:C785 80FDFFF>mov word ptr [ebp-280], 494
00447BDA BA 03000000 mov edx, 3
00447BDF 8B85 00FEFFFF mov eax, dword ptr [ebp-200]
00447BE5 8B08 mov ecx, dword ptr [eax]
00447BE7 FF51 FC call dword ptr [ecx-4]
00447BEA 66:C785 80FDFFF>mov word ptr [ebp-280], 488
00447BF3 > 33D2 xor edx, edx
00447BF5 8BC6 mov eax, esi
00447BF7 E8 5C470D00 call <unknown_libname_504>
00447BFC > 83BD 5CF8FFFF 0>cmp dword ptr [ebp-7A4], 0
00447C03 75 25 jnz short <loc_447C2A>
00447C05 83BD 60F8FFFF 0>cmp dword ptr [ebp-7A0], 0
00447C0C > 75 1C jnz short <loc_447C2A>
00447C0E > 8B8D 64F8FFFF mov ecx, dword ptr [ebp-79C]
00447C14 3B8D 88F8FFFF cmp ecx, dword ptr [ebp-778]
00447C1A 7C 0E jl short <loc_447C2A>
00447C1C 8B85 68F8FFFF mov eax, dword ptr [ebp-798]
00447C22 3B85 8CF8FFFF cmp eax, dword ptr [ebp-774]
00447C28 7D 1B jge short <loc_447C45>
00447C2A > 6A 01 push 1
00447C2C > 56 push esi
00447C2D 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
00447C33 52 push edx
00447C34 > E8 C33B0000 call <sub_44B7FC>
00447C39 83C4 0C add esp, 0C
00447C3C > 83F8 3C cmp eax, 3C
00447C3F ^ 0F8C 81FDFFFF jl <loc_4479C6>
00447C45 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447C4B 8D95 D0FCFFFF lea edx, dword ptr [ebp-330]
00447C51 B9 04000000 mov ecx, 4
00447C56 8B18 mov ebx, dword ptr [eax]
00447C58 > FF53 08 call dword ptr [ebx+8]
00447C5B 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447C61 8D95 5CF8FFFF lea edx, dword ptr [ebp-7A4]
00447C67 B9 10000000 mov ecx, 10
00447C6C > 8B18 mov ebx, dword ptr [eax]
00447C6E FF53 08 call dword ptr [ebx+8]
00447C71 8BC6 mov eax, esi
00447C73 E8 EC460D00 call <@Classes@TStream@GetSize$qq>
00447C78 8985 C8FCFFFF mov dword ptr [ebp-338], eax
00447C7E 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447C84 > B9 04000000 mov ecx, 4
00447C89 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447C8F 8B18 mov ebx, dword ptr [eax]
00447C91 FF53 08 call dword ptr [ebx+8]
00447C94 > 8B95 B4FCFFFF mov edx, dword ptr [ebp-34C]
00447C9A 8BC6 mov eax, esi
00447C9C > E8 0F4A0D00 call <@Classes@TCustomMemoryStrea>
00447CA1 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447CA7 33D2 xor edx, edx
00447CA9 66:B9 0200 mov cx, 2
00447CAD 8B18 mov ebx, dword ptr [eax]
00447CAF FF53 0C call dword ptr [ebx+C]
00447CB2 FF85 BCFCFFFF inc dword ptr [ebp-344]
00447CB8 89B5 F8FDFFFF mov dword ptr [ebp-208], esi
00447CBE 83BD F8FDFFFF 0>cmp dword ptr [ebp-208], 0
00447CC5 74 30 je short <loc_447CF7>
00447CC7 8B85 F8FDFFFF mov eax, dword ptr [ebp-208]
00447CCD 8B10 mov edx, dword ptr [eax]
00447CCF 8995 FCFDFFFF mov dword ptr [ebp-204], edx
00447CD5 66:C785 80FDFFF>mov word ptr [ebp-280], 4AC
00447CDE BA 03000000 mov edx, 3
00447CE3 8B85 F8FDFFFF mov eax, dword ptr [ebp-208]
00447CE9 8B08 mov ecx, dword ptr [eax]
00447CEB FF51 FC call dword ptr [ecx-4]
00447CEE 66:C785 80FDFFF>mov word ptr [ebp-280], 4A0
00447CF7 > 8B95 D4FCFFFF mov edx, dword ptr [ebp-32C]
00447CFD 8B85 E4FCFFFF mov eax, dword ptr [ebp-31C]
00447D03 E8 A0230D00 call <@Classes@TList@Get$qqri>
00447D08 > 50 push eax
00447D09 E8 BAA00E00 call <__rtl_close>
00447D0E 59 pop ecx
00447D0F FF85 D4FCFFFF inc dword ptr [ebp-32C]
00447D15 > 8B8D E4FCFFFF mov ecx, dword ptr [ebp-31C]
00447D1B 8B41 08 mov eax, dword ptr [ecx+8]
00447D1E 3B85 D4FCFFFF cmp eax, dword ptr [ebp-32C]
00447D24 >^ 0F8F B9FAFFFF jg <loc_4477E3>
00447D2A 8B85 E4FCFFFF mov eax, dword ptr [ebp-31C]
00447D30 > 8B10 mov edx, dword ptr [eax]
00447D32 FF52 08 call dword ptr [edx+8]
00447D35 > 33C9 xor ecx, ecx
00447D37 2B8D D0FCFFFF sub ecx, dword ptr [ebp-330]
00447D3D 898D C8FCFFFF mov dword ptr [ebp-338], ecx
00447D43 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447D49 B9 04000000 mov ecx, 4
00447D4E 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447D54 8B18 mov ebx, dword ptr [eax]
00447D56 FF53 08 call dword ptr [ebx+8]
00447D59 FF85 D0FCFFFF inc dword ptr [ebp-330]
00447D5F > 8B85 D0FCFFFF mov eax, dword ptr [ebp-330]
00447D65 3B85 90F8FFFF cmp eax, dword ptr [ebp-770]
00447D6B ^ 0F8C 3CF4FFFF jl <loc_4471AD>
00447D71 8B95 40FDFFFF mov edx, dword ptr [ebp-2C0] ; 用户名
00447D77 52 push edx
00447D78 8B8D 44FDFFFF mov ecx, dword ptr [ebp-2BC]
00447D7E 51 push ecx
00447D7F 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00447D85 50 push eax
00447D86 E8 853B0000 call <sub_44B910>
00447D8B 83C4 0C add esp, 0C
00447D8E 8B95 6CFDFFFF mov edx, dword ptr [ebp-294]
00447D94 52 push edx
00447D95 E8 6E3C0000 call <sub_44BA08>
00447D9A 59 pop ecx
00447D9B 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294] ; 转换flash时用户名与机器码的运算。
00447DA1 8B81 94080000 mov eax, dword ptr [ecx+894] ; 这个值熟悉吧
00447DA7 B9 0A000000 mov ecx, 0A
00447DAC > 99 cdq
00447DAD F7F9 idiv ecx
00447DAF 8B85 2CFDFFFF mov eax, dword ptr [ebp-2D4]
00447DB5 0FBE48 F9 movsx ecx, byte ptr [eax-7] ; 还是上篇说的第6个字串比较
00447DB9 83C1 BF add ecx, -41
00447DBC 2BCA sub ecx, edx
00447DBE 898D 28FDFFFF mov dword ptr [ebp-2D8], ecx
00447DC4 > 83BD 28FDFFFF 0>cmp dword ptr [ebp-2D8], 0
00447DCB 75 3F jnz short <unk_59DE0C>
00447DCD 33D2 xor edx, edx
00447DCF 8995 D0FCFFFF mov dword ptr [ebp-330], edx
00447DD5 > B8 05000000 mov eax, 5 ; 取注册码的20位字串18-13位的运算
00447DDA 8B95 2CFDFFFF mov edx, dword ptr [ebp-2D4]
00447DE0 > 2B85 D0FCFFFF sub eax, dword ptr [ebp-330]
00447DE6 8A0C02 mov cl, byte ptr [edx+eax]
00447DE9 8B85 40FDFFFF mov eax, dword ptr [ebp-2C0]
00447DEF 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00447DF5 80C1 EC add cl, 0EC
00447DF8 > 880C10 mov byte ptr [eax+edx], cl ; 内存中查看得一字串
00447DFB FF85 D0FCFFFF inc dword ptr [ebp-330]
00447E01 83BD D0FCFFFF 0>cmp dword ptr [ebp-330], 6
00447E08 ^ 7C CB jl short <loc_447DD5>
00447E0A EB 43 jmp short <loc_447E4F>
00447E0C > 33C9 xor ecx, ecx
00447E0E 898D D0FCFFFF mov dword ptr [ebp-330], ecx
00447E14 > B8 05000000 mov eax, 5
00447E19 8B95 2CFDFFFF mov edx, dword ptr [ebp-2D4]
00447E1F 2B85 D0FCFFFF sub eax, dword ptr [ebp-330]
00447E25 8A0C02 mov cl, byte ptr [edx+eax]
00447E28 8B85 40FDFFFF mov eax, dword ptr [ebp-2C0]
00447E2E 80C1 EC add cl, 0EC
00447E31 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
00447E37 2A8D 28FDFFFF sub cl, byte ptr [ebp-2D8]
00447E3D 880C10 mov byte ptr [eax+edx], cl
00447E40 FF85 D0FCFFFF inc dword ptr [ebp-330]
00447E46 83BD D0FCFFFF 0>cmp dword ptr [ebp-330], 6
00447E4D ^ 7C C5 jl short <dword_59DE14>
00447E4F > 8B8D 40FDFFFF mov ecx, dword ptr [ebp-2C0]
00447E55 8D85 F4FDFFFF lea eax, dword ptr [ebp-20C]
00447E5B C641 06 00 mov byte ptr [ecx+6], 0
00447E5F 66:C785 80FDFFF>mov word ptr [ebp-280], 4B8
00447E68 8B95 40FDFFFF mov edx, dword ptr [ebp-2C0]
00447E6E E8 71910F00 call <sub_540FE4>
00447E73 8BD0 mov edx, eax
00447E75 FF85 8CFDFFFF inc dword ptr [ebp-274]
00447E7B 8D45 F8 lea eax, dword ptr [ebp-8]
00447E7E E8 3D940F00 call <sub_5412C0>
00447E83 FF8D 8CFDFFFF dec dword ptr [ebp-274]
00447E89 8D85 F4FDFFFF lea eax, dword ptr [ebp-20C]
00447E8F BA 02000000 mov edx, 2
00447E94 E8 F7930F00 call <sub_541290>
00447E99 8B4D F8 mov ecx, dword ptr [ebp-8]
00447E9C 51 push ecx
00447E9D 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00447EA3 50 push eax
00447EA4 E8 BF3B0000 call <sub_44BA68> ; 关键算法跟入
00447EA9 D99D 20FDFFFF fstp dword ptr [ebp-2E0]
00447EAF 83C4 08 add esp, 8
00447EB2 83C4 F8 add esp, -8
00447EB5 D985 20FDFFFF fld dword ptr [ebp-2E0]
00447EBB DD1C24 fstp qword ptr [esp]
00447EBE E8 8D2F0F00 call <_sin>
00447EC3 83C4 08 add esp, 8
00447EC6 DC0D 2C8A4400 fmul qword ptr [<dbl_448A2C>]
00447ECC D8AD 20FDFFFF fsubr dword ptr [ebp-2E0]
00447ED2 D8A5 1CFDFFFF fsub dword ptr [ebp-2E4] ; 关键点要等0
00447ED8 83C4 F8 add esp, -8
00447EDB DD1C24 fstp qword ptr [esp]
00447EDE E8 091A0F00 call <_fabs>
00447EE3 83C4 08 add esp, 8
00447EE6 D99D 20FDFFFF fstp dword ptr [ebp-2E0]
00447EEC 83BD F4EFFFFF 0>cmp dword ptr [ebp-100C], 1
00447EF3 75 3F jnz short <loc_447F34>
00447EF5 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447EFB 8B8D 00FDFFFF mov ecx, dword ptr [ebp-300]
00447F01 C1E1 05 shl ecx, 5
00447F04 8B95 04FDFFFF mov edx, dword ptr [ebp-2FC]
00447F0A 8B18 mov ebx, dword ptr [eax]
00447F0C FF53 08 call dword ptr [ebx+8]
00447F0F 8B85 00FDFFFF mov eax, dword ptr [ebp-300]
00447F15 C1E0 05 shl eax, 5
00447F18 8985 C8FCFFFF mov dword ptr [ebp-338], eax
00447F1E 8D95 C8FCFFFF lea edx, dword ptr [ebp-338]
00447F24 B9 04000000 mov ecx, 4
00447F29 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447F2F 8B18 mov ebx, dword ptr [eax]
00447F31 FF53 08 call dword ptr [ebx+8]
00447F34 > 83BD E8EFFFFF 0>cmp dword ptr [ebp-1018], 1
00447F3B 7E 0A jle short <loc_447F47>
00447F3D C785 E8EFFFFF 0>mov dword ptr [ebp-1018], 1
00447F47 > 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447F4D 8D95 98EFFFFF lea edx, dword ptr [ebp-1068]
00447F53 B9 B4000000 mov ecx, 0B4
00447F58 8B18 mov ebx, dword ptr [eax]
00447F5A FF53 08 call dword ptr [ebx+8]
00447F5D 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
00447F63 8D95 6CEFFFFF lea edx, dword ptr [ebp-1094]
00447F69 B9 2C000000 mov ecx, 2C
00447F6E 8B18 mov ebx, dword ptr [eax]
00447F70 FF53 08 call dword ptr [ebx+8]
00447F73 8B85 F8FCFFFF mov eax, dword ptr [ebp-308]
00447F79 8985 ECFDFFFF mov dword ptr [ebp-214], eax
00447F7F 83BD ECFDFFFF 0>cmp dword ptr [ebp-214], 0
00447F86 74 30 je short <loc_447FB8>
00447F88 8B95 ECFDFFFF mov edx, dword ptr [ebp-214]
00447F8E 8B0A mov ecx, dword ptr [edx]
00447F90 898D F0FDFFFF mov dword ptr [ebp-210], ecx
00447F96 66:C785 80FDFFF>mov word ptr [ebp-280], 4D0
00447F9F BA 03000000 mov edx, 3
00447FA4 8B85 ECFDFFFF mov eax, dword ptr [ebp-214]
00447FAA 8B08 mov ecx, dword ptr [eax]
00447FAC FF51 FC call dword ptr [ecx-4]
00447FAF 66:C785 80FDFFF>mov word ptr [ebp-280], 4C4
00447FB8 > 8B85 F4FCFFFF mov eax, dword ptr [ebp-30C]
00447FBE 8985 E4FDFFFF mov dword ptr [ebp-21C], eax
00447FC4 83BD E4FDFFFF 0>cmp dword ptr [ebp-21C], 0
00447FCB 74 30 je short <loc_447FFD>
00447FCD 8B95 E4FDFFFF mov edx, dword ptr [ebp-21C]
00447FD3 8B0A mov ecx, dword ptr [edx]
00447FD5 898D E8FDFFFF mov dword ptr [ebp-218], ecx
00447FDB 66:C785 80FDFFF>mov word ptr [ebp-280], 4E8
00447FE4 BA 03000000 mov edx, 3
00447FE9 8B85 E4FDFFFF mov eax, dword ptr [ebp-21C]
00447FEF 8B08 mov ecx, dword ptr [eax]
00447FF1 FF51 FC call dword ptr [ecx-4]
00447FF4 66:C785 80FDFFF>mov word ptr [ebp-280], 4DC
00447FFD > 8B85 E4FCFFFF mov eax, dword ptr [ebp-31C]
00448003 8985 DCFDFFFF mov dword ptr [ebp-224], eax
00448009 83BD DCFDFFFF 0>cmp dword ptr [ebp-224], 0
00448010 74 30 je short <loc_448042>
00448012 8B95 DCFDFFFF mov edx, dword ptr [ebp-224]
00448018 8B0A mov ecx, dword ptr [edx]
0044801A 898D E0FDFFFF mov dword ptr [ebp-220], ecx
00448020 66:C785 80FDFFF>mov word ptr [ebp-280], 500
00448029 BA 03000000 mov edx, 3
0044802E 8B85 DCFDFFFF mov eax, dword ptr [ebp-224]
00448034 8B08 mov ecx, dword ptr [eax]
00448036 FF51 FC call dword ptr [ecx-4]
00448039 66:C785 80FDFFF>mov word ptr [ebp-280], 4F4
00448042 > 8B85 04FDFFFF mov eax, dword ptr [ebp-2FC]
00448048 50 push eax
00448049 E8 7A9D0E00 call <__rtl_close>
0044804E 59 pop ecx
0044804F 8B95 FCFCFFFF mov edx, dword ptr [ebp-304]
00448055 8995 D4FDFFFF mov dword ptr [ebp-22C], edx
0044805B 83BD D4FDFFFF 0>cmp dword ptr [ebp-22C], 0
00448062 74 30 je short <loc_448094>
00448064 8B8D D4FDFFFF mov ecx, dword ptr [ebp-22C]
0044806A 8B01 mov eax, dword ptr [ecx]
0044806C 8985 D8FDFFFF mov dword ptr [ebp-228], eax
00448072 66:C785 80FDFFF>mov word ptr [ebp-280], 518
0044807B BA 03000000 mov edx, 3
00448080 8B85 D4FDFFFF mov eax, dword ptr [ebp-22C]
00448086 8B08 mov ecx, dword ptr [eax]
00448088 FF51 FC call dword ptr [ecx-4]
0044808B 66:C785 80FDFFF>mov word ptr [ebp-280], 50C
00448094 > 8B95 F0FCFFFF mov edx, dword ptr [ebp-310]
0044809A 52 push edx
0044809B E8 289D0E00 call <__rtl_close>
004480A0 59 pop ecx
004480A1 8B85 B4FCFFFF mov eax, dword ptr [ebp-34C]
004480A7 8985 CCFDFFFF mov dword ptr [ebp-234], eax
004480AD 83BD CCFDFFFF 0>cmp dword ptr [ebp-234], 0
004480B4 74 30 je short <loc_4480E6>
004480B6 8B95 CCFDFFFF mov edx, dword ptr [ebp-234]
004480BC 8B0A mov ecx, dword ptr [edx]
004480BE 898D D0FDFFFF mov dword ptr [ebp-230], ecx
004480C4 66:C785 80FDFFF>mov word ptr [ebp-280], 530
004480CD BA 03000000 mov edx, 3
004480D2 8B85 CCFDFFFF mov eax, dword ptr [ebp-234]
004480D8 8B08 mov ecx, dword ptr [eax]
004480DA FF51 FC call dword ptr [ecx-4]
004480DD 66:C785 80FDFFF>mov word ptr [ebp-280], 524
004480E6 > 81BD BCFCFFFF 1>cmp dword ptr [ebp-344], 2710
004480F0 0F8E A9000000 jle <loc_44819F>
004480F6 A1 F0D65900 mov eax, dword ptr [59D6F0]
004480FB 8B00 mov eax, dword ptr [eax]
004480FD E8 3A190A00 call <@Forms@TCustomForm@Close$qqrv>
00448102 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00448108 8B0A mov ecx, dword ptr [edx]
0044810A 898D C4FDFFFF mov dword ptr [ebp-23C], ecx
00448110 83BD C4FDFFFF 0>cmp dword ptr [ebp-23C], 0
00448117 74 30 je short <loc_448149>
00448119 8B85 C4FDFFFF mov eax, dword ptr [ebp-23C]
0044811F 8B10 mov edx, dword ptr [eax]
00448121 8995 C8FDFFFF mov dword ptr [ebp-238], edx
00448127 66:C785 80FDFFF>mov word ptr [ebp-280], 548
00448130 BA 03000000 mov edx, 3
00448135 8B85 C4FDFFFF mov eax, dword ptr [ebp-23C]
0044813B 8B08 mov ecx, dword ptr [eax]
0044813D FF51 FC call dword ptr [ecx-4]
00448140 66:C785 80FDFFF>mov word ptr [ebp-280], 53C
00448149 > 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044814F B2 01 mov dl, 1
00448151 A1 CC8E5700 mov eax, dword ptr [578ECC]
00448156 E8 F1810100 call <@Sysutils@EVariantError@$bctr$qqri_3>
0044815B 8B15 F0D65900 mov edx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00448161 8902 mov dword ptr [edx], eax
00448163 8D85 C0FDFFFF lea eax, dword ptr [ebp-240]
00448169 66:C785 80FDFFF>mov word ptr [ebp-280], 554
00448172 BA A2D65500 mov edx, 0055D6A2
00448177 E8 688E0F00 call <sub_540FE4>
0044817C FF85 8CFDFFFF inc dword ptr [ebp-274]
00448182 8B00 mov eax, dword ptr [eax]
00448184 E8 1BFB0A00 call <@Dialogs@ShowMessage$qqrx17System@An>
00448189 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044818F 8D85 C0FDFFFF lea eax, dword ptr [ebp-240]
00448195 BA 02000000 mov edx, 2
0044819A E8 F1900F00 call <sub_541290>
0044819F > C785 0CFDFFFF F>mov dword ptr [ebp-2F4], 1F4
004481A9 8B8D 0CFDFFFF mov ecx, dword ptr [ebp-2F4]
004481AF 81C1 F4010000 add ecx, 1F4
004481B5 898D 28EFFFFF mov dword ptr [ebp-10D8], ecx
004481BB DB85 28EFFFFF fild dword ptr [ebp-10D8]
004481C1 D88D 20FDFFFF fmul dword ptr [ebp-2E0]
004481C7 E8 48170F00 call <@_ftol$qv>
004481CC 8985 0CFDFFFF mov dword ptr [ebp-2F4], eax
004481D2 DB85 90F8FFFF fild dword ptr [ebp-770] ; 视频的总帧数
004481D8 D80D 348A4400 fmul dword ptr [<flt_448A34>]
004481DE 8B95 A8F8FFFF mov edx, dword ptr [ebp-758]
004481E4 8BCA mov ecx, edx
004481E6 C1E2 06 shl edx, 6
004481E9 2BD1 sub edx, ecx
004481EB C1E2 05 shl edx, 5
004481EE 8995 28EFFFFF mov dword ptr [ebp-10D8], edx
004481F4 8B85 0CFDFFFF mov eax, dword ptr [ebp-2F4]
004481FA C1E0 04 shl eax, 4
004481FD DB85 28EFFFFF fild dword ptr [ebp-10D8]
00448203 8D0480 lea eax, dword ptr [eax+eax*4]
00448206 8D0480 lea eax, dword ptr [eax+eax*4]
00448209 DEC1 faddp st(1), st(0)
0044820B 8D0480 lea eax, dword ptr [eax+eax*4]
0044820E 8985 24EFFFFF mov dword ptr [ebp-10DC], eax
00448214 DB85 24EFFFFF fild dword ptr [ebp-10DC]
0044821A DEC1 faddp st(1), st(0)
0044821C E8 F3160F00 call <@_ftol$qv>
00448221 8985 0CFDFFFF mov dword ptr [ebp-2F4], eax
00448227 8D85 BCFDFFFF lea eax, dword ptr [ebp-244]
0044822D 66:C785 80FDFFF>mov word ptr [ebp-280], 560
00448236 BA B7D65500 mov edx, 0055D6B7
0044823B E8 A48D0F00 call <sub_540FE4>
00448240 FF85 8CFDFFFF inc dword ptr [ebp-274]
00448246 8B10 mov edx, dword ptr [eax]
00448248 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
0044824E 8B01 mov eax, dword ptr [ecx]
00448250 E8 AF4E0B00 call <@Controls@TControl@SetText$qqrx17Sys>
00448255 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044825B 8D85 BCFDFFFF lea eax, dword ptr [ebp-244]
00448261 BA 02000000 mov edx, 2
00448266 E8 25900F00 call <sub_541290>
0044826B 80BD 0BFDFFFF 0>cmp byte ptr [ebp-2F5], 1
00448272 75 4B jnz short <loc_4482BF>
00448274 66:C785 80FDFFF>mov word ptr [ebp-280], 56C
0044827D BA CDD65500 mov edx, 0055D6CD
00448282 8D85 B8FDFFFF lea eax, dword ptr [ebp-248]
00448288 E8 578D0F00 call <sub_540FE4>
0044828D FF85 8CFDFFFF inc dword ptr [ebp-274]
00448293 8B10 mov edx, dword ptr [eax]
00448295 A1 F0D65900 mov eax, dword ptr [59D6F0]
0044829A 8B08 mov ecx, dword ptr [eax]
0044829C 8B81 D4020000 mov eax, dword ptr [ecx+2D4]
004482A2 E8 5D4E0B00 call <@Controls@TControl@SetText$qqrx17Sys>
004482A7 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004482AD 8D85 B8FDFFFF lea eax, dword ptr [ebp-248]
004482B3 BA 02000000 mov edx, 2
004482B8 E8 D38F0F00 call <sub_541290>
004482BD EB 49 jmp short <loc_448308>
004482BF > 66:C785 80FDFFF>mov word ptr [ebp-280], 578
004482C8 BA DFD65500 mov edx, 0055D6DF
004482CD 8D85 B4FDFFFF lea eax, dword ptr [ebp-24C]
004482D3 E8 0C8D0F00 call <sub_540FE4>
004482D8 FF85 8CFDFFFF inc dword ptr [ebp-274]
004482DE 8B10 mov edx, dword ptr [eax]
004482E0 A1 F0D65900 mov eax, dword ptr [59D6F0]
004482E5 8B08 mov ecx, dword ptr [eax]
004482E7 8B81 D4020000 mov eax, dword ptr [ecx+2D4]
004482ED E8 124E0B00 call <@Controls@TControl@SetText$qqrx17Sys>
004482F2 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004482F8 8D85 B4FDFFFF lea eax, dword ptr [ebp-24C]
004482FE BA 02000000 mov edx, 2
00448303 E8 888F0F00 call <sub_541290>
00448308 > 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
0044830E 8B95 90F8FFFF mov edx, dword ptr [ebp-770]
00448314 8B01 mov eax, dword ptr [ecx]
00448316 8B80 D0020000 mov eax, dword ptr [eax+2D0]
0044831C E8 FF960C00 call <@Comctrls@TProgressBar@SetMax$qqri>
00448321 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
00448327 33D2 xor edx, edx
00448329 8B01 mov eax, dword ptr [ecx]
0044832B 8B80 D0020000 mov eax, dword ptr [eax+2D0]
00448331 E8 FA960C00 call <@Comctrls@TProgressBar@SetPosition$q>
00448336 8B0D F0D65900 mov ecx, dword ptr [59D6F0] ; 屏录专家._WaitForm
0044833C 8B01 mov eax, dword ptr [ecx]
0044833E E8 6D520B00 call <sub_4FD5B0>
00448343 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00448349 05 F8190000 add eax, 19F8
0044834E E8 599DFBFF call <sub_4020AC>
00448353 8BF8 mov edi, eax
00448355 33C0 xor eax, eax
00448357 83C9 FF or ecx, FFFFFFFF
0044835A 8DB5 4CF4FFFF lea esi, dword ptr [ebp-BB4]
00448360 F2:AE repne scas byte ptr es:[edi]
00448362 F7D1 not ecx
00448364 2BF9 sub edi, ecx
00448366 8BD1 mov edx, ecx
00448368 87F7 xchg edi, esi
0044836A C1E9 02 shr ecx, 2
0044836D 8BC7 mov eax, edi
0044836F F3:A5 rep movs dword ptr es:[edi], dword ptr [e>
00448371 8BCA mov ecx, edx
00448373 8D85 4CF4FFFF lea eax, dword ptr [ebp-BB4]
00448379 83E1 03 and ecx, 3
0044837C F3:A4 rep movs byte ptr es:[edi], byte ptr [esi>
0044837E 68 F3D65500 push 0055D6F3 ; ASCII "lsflash.set "
00448383 50 push eax
00448384 E8 BFA40E00 call <_strcat>
00448389 83C4 08 add esp, 8
0044838C 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
00448392 52 push edx
00448393 E8 28D41000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
00448398 68 00D75500 push 0055D700 ; ASCII "wb"
0044839D 8D8D 4CF4FFFF lea ecx, dword ptr [ebp-BB4]
004483A3 51 push ecx
004483A4 E8 C7C20E00 call <_fopen>
004483A9 83C4 08 add esp, 8
004483AC 8BD8 mov ebx, eax
004483AE 66:C785 80FDFFF>mov word ptr [ebp-280], 584
004483B7 8D85 B0FDFFFF lea eax, dword ptr [ebp-250]
004483BD E8 9695FBFF call <unknown_libname_55>
004483C2 8BD0 mov edx, eax
004483C4 FF85 8CFDFFFF inc dword ptr [ebp-274]
004483CA 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
004483D0 8B81 7C030000 mov eax, dword ptr [ecx+37C]
004483D6 E8 F94C0B00 call <@TControl@GetText$qqrv>
004483DB 8D85 B0FDFFFF lea eax, dword ptr [ebp-250]
004483E1 E8 C69CFBFF call <sub_4020AC>
004483E6 8BF8 mov edi, eax
004483E8 33C0 xor eax, eax
004483EA 83C9 FF or ecx, FFFFFFFF
004483ED 8DB5 4CF4FFFF lea esi, dword ptr [ebp-BB4]
004483F3 F2:AE repne scas byte ptr es:[edi]
004483F5 F7D1 not ecx
004483F7 2BF9 sub edi, ecx
004483F9 8BD1 mov edx, ecx
004483FB 87F7 xchg edi, esi
004483FD C1E9 02 shr ecx, 2
00448400 8BC7 mov eax, edi
00448402 F3:A5 rep movs dword ptr es:[edi], dword ptr [e>
00448404 8BCA mov ecx, edx
00448406 BA 02000000 mov edx, 2
0044840B 83E1 03 and ecx, 3
0044840E 8D85 B0FDFFFF lea eax, dword ptr [ebp-250]
00448414 F3:A4 rep movs byte ptr es:[edi], byte ptr [esi>
00448416 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044841C E8 6F8E0F00 call <sub_541290>
00448421 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00448427 51 push ecx
00448428 E8 BF360000 call <sub_44BAEC>
0044842D 59 pop ecx
0044842E 8985 10FDFFFF mov dword ptr [ebp-2F0], eax
00448434 8B85 14FDFFFF mov eax, dword ptr [ebp-2EC]
0044843A 8B95 10FDFFFF mov edx, dword ptr [ebp-2F0]
00448440 0110 add dword ptr [eax], edx
00448442 53 push ebx
00448443 6A 01 push 1
00448445 68 00040000 push 400
0044844A 8D8D 4CF4FFFF lea ecx, dword ptr [ebp-BB4]
00448450 51 push ecx
00448451 E8 6EC60E00 call <_fwrite>
00448456 83C4 10 add esp, 10
00448459 66:C785 80FDFFF>mov word ptr [ebp-280], 590
00448462 8D85 ACFDFFFF lea eax, dword ptr [ebp-254]
00448468 E8 EB94FBFF call <unknown_libname_55> ; 1
0044846D 8BD0 mov edx, eax
0044846F FF85 8CFDFFFF inc dword ptr [ebp-274]
00448475 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
0044847B 8B81 E0040000 mov eax, dword ptr [ecx+4E0]
00448481 E8 72E20A00 call <sub_4F66F8>
00448486 8D85 ACFDFFFF lea eax, dword ptr [ebp-254]
0044848C E8 1B9CFBFF call <sub_4020AC>
00448491 8BF8 mov edi, eax
00448493 33C0 xor eax, eax
00448495 83C9 FF or ecx, FFFFFFFF
00448498 8DB5 4CF4FFFF lea esi, dword ptr [ebp-BB4]
0044849E F2:AE repne scas byte ptr es:[edi]
004484A0 F7D1 not ecx
004484A2 2BF9 sub edi, ecx
004484A4 8BD1 mov edx, ecx
004484A6 87F7 xchg edi, esi
004484A8 C1E9 02 shr ecx, 2
004484AB 8BC7 mov eax, edi
004484AD F3:A5 rep movs dword ptr es:[edi], dword ptr [e>
004484AF 8BCA mov ecx, edx
004484B1 BA 02000000 mov edx, 2
004484B6 83E1 03 and ecx, 3
004484B9 8D85 ACFDFFFF lea eax, dword ptr [ebp-254]
004484BF F3:A4 rep movs byte ptr es:[edi], byte ptr [esi>
004484C1 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004484C7 E8 C48D0F00 call <sub_541290>
004484CC 53 push ebx
004484CD 6A 01 push 1
004484CF 68 00040000 push 400
004484D4 8D8D 4CF4FFFF lea ecx, dword ptr [ebp-BB4]
004484DA 51 push ecx
004484DB E8 E4C50E00 call <_fwrite>
004484E0 83C4 10 add esp, 10
004484E3 80BD 0BFDFFFF 0>cmp byte ptr [ebp-2F5], 1
004484EA 75 2E jnz short <loc_44851A>
004484EC 33C0 xor eax, eax
004484EE 8B15 20D75900 mov edx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
004484F4 8A85 0BFDFFFF mov al, byte ptr [ebp-2F5]
004484FA 8985 D0FCFFFF mov dword ptr [ebp-330], eax
00448500 8B0A mov ecx, dword ptr [edx]
00448502 8B81 08030000 mov eax, dword ptr [ecx+308]
00448508 8B10 mov edx, dword ptr [eax]
0044850A FF92 B4000000 call dword ptr [edx+B4]
00448510 3C 01 cmp al, 1
00448512 75 06 jnz short <loc_44851A>
00448514 FF85 D0FCFFFF inc dword ptr [ebp-330]
0044851A > 53 push ebx
0044851B 6A 01 push 1
0044851D 6A 04 push 4
0044851F 8D8D D0FCFFFF lea ecx, dword ptr [ebp-330]
00448525 51 push ecx
00448526 E8 99C50E00 call <_fwrite>
0044852B 83C4 10 add esp, 10
0044852E A1 20D75900 mov eax, dword ptr [59D720]
00448533 8B10 mov edx, dword ptr [eax]
00448535 8B82 D4020000 mov eax, dword ptr [edx+2D4]
0044853B 8B10 mov edx, dword ptr [eax]
0044853D FF92 B4000000 call dword ptr [edx+B4]
00448543 33C9 xor ecx, ecx
00448545 8AC8 mov cl, al
00448547 8D85 D0FCFFFF lea eax, dword ptr [ebp-330]
0044854D 898D D0FCFFFF mov dword ptr [ebp-330], ecx
00448553 53 push ebx
00448554 6A 01 push 1
00448556 6A 04 push 4
00448558 50 push eax
00448559 E8 66C50E00 call <_fwrite>
0044855E 8B15 20D75900 mov edx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00448564 83C4 10 add esp, 10
00448567 8B0A mov ecx, dword ptr [edx]
00448569 8D95 D0FCFFFF lea edx, dword ptr [ebp-330]
0044856F 8B81 24030000 mov eax, dword ptr [ecx+324]
00448575 8985 D0FCFFFF mov dword ptr [ebp-330], eax
0044857B 53 push ebx
0044857C 6A 01 push 1
0044857E 6A 04 push 4
00448580 52 push edx
00448581 E8 3EC50E00 call <_fwrite>
00448586 83C4 10 add esp, 10
00448589 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
0044858F 8B01 mov eax, dword ptr [ecx]
00448591 8B80 EC020000 mov eax, dword ptr [eax+2EC]
00448597 8B10 mov edx, dword ptr [eax]
00448599 FF92 B4000000 call dword ptr [edx+B4]
0044859F 33C9 xor ecx, ecx
004485A1 8D95 D0FCFFFF lea edx, dword ptr [ebp-330]
004485A7 8AC8 mov cl, al
004485A9 B8 01000000 mov eax, 1
004485AE 2BC1 sub eax, ecx
004485B0 8985 D0FCFFFF mov dword ptr [ebp-330], eax
004485B6 53 push ebx
004485B7 6A 01 push 1
004485B9 6A 04 push 4
004485BB 52 push edx
004485BC E8 03C50E00 call <_fwrite>
004485C1 83C4 10 add esp, 10
004485C4 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
004485CA 8B01 mov eax, dword ptr [ecx]
004485CC 8B80 F0020000 mov eax, dword ptr [eax+2F0]
004485D2 8B10 mov edx, dword ptr [eax]
004485D4 FF92 B4000000 call dword ptr [edx+B4]
004485DA 33C9 xor ecx, ecx
004485DC 8AC8 mov cl, al
004485DE 8D85 D0FCFFFF lea eax, dword ptr [ebp-330]
004485E4 898D D0FCFFFF mov dword ptr [ebp-330], ecx
004485EA 53 push ebx
004485EB 6A 01 push 1
004485ED 6A 04 push 4
004485EF 50 push eax
004485F0 E8 CFC40E00 call <_fwrite>
004485F5 83C4 10 add esp, 10
004485F8 33D2 xor edx, edx
004485FA 8995 D0FCFFFF mov dword ptr [ebp-330], edx
00448600 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00448606 8B01 mov eax, dword ptr [ecx]
00448608 8B80 F4020000 mov eax, dword ptr [eax+2F4]
0044860E 8B10 mov edx, dword ptr [eax]
00448610 FF92 B4000000 call dword ptr [edx+B4]
00448616 3C 01 cmp al, 1
00448618 75 26 jnz short <loc_448640>
0044861A 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00448620 8B01 mov eax, dword ptr [ecx]
00448622 8B80 F8020000 mov eax, dword ptr [eax+2F8]
00448628 8B10 mov edx, dword ptr [eax]
0044862A FF92 B4000000 call dword ptr [edx+B4]
00448630 3C 01 cmp al, 1
00448632 75 0C jnz short <loc_448640>
00448634 C785 D0FCFFFF 0>mov dword ptr [ebp-330], 2
0044863E EB 24 jmp short <loc_448664>
00448640 > 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00448646 8B01 mov eax, dword ptr [ecx]
00448648 8B80 F4020000 mov eax, dword ptr [eax+2F4]
0044864E 8B10 mov edx, dword ptr [eax]
00448650 FF92 B4000000 call dword ptr [edx+B4]
00448656 3C 01 cmp al, 1
00448658 75 0A jnz short <loc_448664>
0044865A C785 D0FCFFFF 0>mov dword ptr [ebp-330], 1
00448664 > 53 push ebx
00448665 6A 01 push 1
00448667 6A 04 push 4
00448669 8D8D D0FCFFFF lea ecx, dword ptr [ebp-330]
0044866F 51 push ecx
00448670 E8 4FC40E00 call <_fwrite>
00448675 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
0044867B 83C4 10 add esp, 10
0044867E 33D2 xor edx, edx
00448680 8D8D D0FCFFFF lea ecx, dword ptr [ebp-330]
00448686 8A90 30150000 mov dl, byte ptr [eax+1530]
0044868C 8995 D0FCFFFF mov dword ptr [ebp-330], edx
00448692 53 push ebx
00448693 6A 01 push 1
00448695 6A 04 push 4
00448697 51 push ecx
00448698 E8 27C40E00 call <_fwrite>
0044869D 83C4 10 add esp, 10
004486A0 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
004486A6 80B8 30150000 0>cmp byte ptr [eax+1530], 1
004486AD 75 1E jnz short <loc_4486CD>
004486AF 8B95 58FDFFFF mov edx, dword ptr [ebp-2A8]
004486B5 52 push edx
004486B6 8B8D B8FCFFFF mov ecx, dword ptr [ebp-348]
004486BC 51 push ecx
004486BD 53 push ebx
004486BE 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
004486C4 50 push eax
004486C5 E8 32340000 call <sub_44BAFC>
004486CA 83C4 10 add esp, 10
004486CD > 53 push ebx
004486CE 6A 01 push 1
004486D0 6A 04 push 4
004486D2 8D95 0CFDFFFF lea edx, dword ptr [ebp-2F4]
004486D8 52 push edx
004486D9 E8 E6C30E00 call <_fwrite>
004486DE 83C4 10 add esp, 10
004486E1 53 push ebx
004486E2 E8 1DBC0E00 call <_fclose>
004486E7 59 pop ecx
004486E8 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
004486EE 8B01 mov eax, dword ptr [ecx]
004486F0 8B80 F4020000 mov eax, dword ptr [eax+2F4]
004486F6 8B10 mov edx, dword ptr [eax]
004486F8 FF92 B4000000 call dword ptr [edx+B4]
004486FE 3C 01 cmp al, 1
00448700 74 1E je short <loc_448720>
00448702 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00448708 8B01 mov eax, dword ptr [ecx]
0044870A 8B80 F8020000 mov eax, dword ptr [eax+2F8]
00448710 8B10 mov edx, dword ptr [eax]
00448712 FF92 B4000000 call dword ptr [edx+B4]
00448718 3C 01 cmp al, 1
0044871A 0F85 50010000 jnz <loc_448870>
00448720 > 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00448726 05 F8190000 add eax, 19F8
0044872B E8 7C99FBFF call <sub_4020AC>
00448730 8BF8 mov edi, eax
00448732 33C0 xor eax, eax
00448734 83C9 FF or ecx, FFFFFFFF
00448737 8DB5 4CF4FFFF lea esi, dword ptr [ebp-BB4]
0044873D F2:AE repne scas byte ptr es:[edi]
0044873F F7D1 not ecx
00448741 2BF9 sub edi, ecx
00448743 8BD1 mov edx, ecx
00448745 87F7 xchg edi, esi
00448747 C1E9 02 shr ecx, 2
0044874A 8BC7 mov eax, edi
0044874C F3:A5 rep movs dword ptr es:[edi], dword ptr [e>
0044874E 8BCA mov ecx, edx
00448750 8D85 4CF4FFFF lea eax, dword ptr [ebp-BB4]
00448756 83E1 03 and ecx, 3
00448759 F3:A4 rep movs byte ptr es:[edi], byte ptr [esi>
0044875B 68 03D75500 push 0055D703 ; ASCII "lsflashkzt.set "
00448760 50 push eax
00448761 E8 E2A00E00 call <_strcat>
00448766 83C4 08 add esp, 8
00448769 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
0044876F 52 push edx
00448770 E8 4BD01000 call <DeleteFileA> ; jmp 到 kernel32.DeleteFileA
00448775 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
0044877B 8B01 mov eax, dword ptr [ecx]
0044877D 8B80 F4020000 mov eax, dword ptr [eax+2F4]
00448783 8B10 mov edx, dword ptr [eax]
00448785 FF92 B4000000 call dword ptr [edx+B4]
0044878B 3C 01 cmp al, 1
0044878D 75 26 jnz short <loc_4487B5>
0044878F 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
00448795 8B01 mov eax, dword ptr [ecx]
00448797 8B80 F8020000 mov eax, dword ptr [eax+2F8]
0044879D 8B10 mov edx, dword ptr [eax]
0044879F FF92 B4000000 call dword ptr [edx+B4]
004487A5 3C 01 cmp al, 1
004487A7 75 0C jnz short <loc_4487B5>
004487A9 C785 D0FCFFFF 0>mov dword ptr [ebp-330], 2
004487B3 EB 24 jmp short <loc_4487D9>
004487B5 > 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
004487BB 8B01 mov eax, dword ptr [ecx]
004487BD 8B80 F4020000 mov eax, dword ptr [eax+2F4]
004487C3 8B10 mov edx, dword ptr [eax]
004487C5 FF92 B4000000 call dword ptr [edx+B4]
004487CB 3C 01 cmp al, 1
004487CD 75 0A jnz short <loc_4487D9>
004487CF C785 D0FCFFFF 0>mov dword ptr [ebp-330], 1
004487D9 > 66:C785 80FDFFF>mov word ptr [ebp-280], 59C
004487E2 8D85 A8FDFFFF lea eax, dword ptr [ebp-258]
004487E8 E8 6B91FBFF call <unknown_libname_55>
004487ED FF85 8CFDFFFF inc dword ptr [ebp-274]
004487F3 8B0D 20D75900 mov ecx, dword ptr [59D720] ; 屏录专家._MakeFlashForm
004487F9 8BD0 mov edx, eax
004487FB 8B01 mov eax, dword ptr [ecx]
004487FD 8B80 18030000 mov eax, dword ptr [eax+318]
00448803 E8 CC480B00 call <@TControl@GetText$qqrv>
00448808 8D85 A8FDFFFF lea eax, dword ptr [ebp-258]
0044880E E8 8D8D0F00 call <@System@AnsiString@ToInt$xqqrv>
00448813 50 push eax
00448814 8B95 D0FCFFFF mov edx, dword ptr [ebp-330]
0044881A 52 push edx
0044881B 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
00448821 8D85 A4FDFFFF lea eax, dword ptr [ebp-25C]
00448827 E8 B8870F00 call <sub_540FE4>
0044882C FF85 8CFDFFFF inc dword ptr [ebp-274]
00448832 8B08 mov ecx, dword ptr [eax]
00448834 51 push ecx
00448835 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
0044883B 50 push eax
0044883C E8 7F370000 call <sub_44BFC0>
00448841 83C4 10 add esp, 10
00448844 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044884A 8D85 A4FDFFFF lea eax, dword ptr [ebp-25C]
00448850 BA 02000000 mov edx, 2
00448855 E8 368A0F00 call <sub_541290>
0044885A FF8D 8CFDFFFF dec dword ptr [ebp-274]
00448860 8D85 A8FDFFFF lea eax, dword ptr [ebp-258]
00448866 BA 02000000 mov edx, 2
0044886B E8 208A0F00 call <sub_541290>
00448870 > 8B8D B8FCFFFF mov ecx, dword ptr [ebp-348]
00448876 898D 9CFDFFFF mov dword ptr [ebp-264], ecx
0044887C 83BD 9CFDFFFF 0>cmp dword ptr [ebp-264], 0
00448883 74 30 je short <loc_4488B5>
00448885 8B85 9CFDFFFF mov eax, dword ptr [ebp-264]
0044888B 8B10 mov edx, dword ptr [eax]
0044888D 8995 A0FDFFFF mov dword ptr [ebp-260], edx
00448893 66:C785 80FDFFF>mov word ptr [ebp-280], 5B4
0044889C BA 03000000 mov edx, 3
004488A1 8B85 9CFDFFFF mov eax, dword ptr [ebp-264]
004488A7 8B08 mov ecx, dword ptr [eax]
004488A9 FF51 FC call dword ptr [ecx-4]
004488AC 66:C785 80FDFFF>mov word ptr [ebp-280], 5A8
004488B5 > 8B85 44FDFFFF mov eax, dword ptr [ebp-2BC]
004488BB 50 push eax
004488BC E8 07950E00 call <__rtl_close>
004488C1 59 pop ecx
004488C2 8B95 40FDFFFF mov edx, dword ptr [ebp-2C0]
004488C8 52 push edx
004488C9 E8 FA940E00 call <__rtl_close>
004488CE 59 pop ecx
004488CF 8B8D 3CFDFFFF mov ecx, dword ptr [ebp-2C4]
004488D5 51 push ecx
004488D6 E8 ED940E00 call <__rtl_close>
004488DB 59 pop ecx
004488DC 66:C785 80FDFFF>mov word ptr [ebp-280], 5C0
004488E5 8D85 98FDFFFF lea eax, dword ptr [ebp-268]
004488EB E8 6890FBFF call <unknown_libname_55>
004488F0 FF85 8CFDFFFF inc dword ptr [ebp-274]
004488F6 E8 9DF50D00 call <@GetCurrentDir$qqrv>
004488FB 8D95 98FDFFFF lea edx, dword ptr [ebp-268]
00448901 8D45 FC lea eax, dword ptr [ebp-4]
00448904 E8 B7890F00 call <sub_5412C0>
00448909 FF8D 8CFDFFFF dec dword ptr [ebp-274]
0044890F 8D85 98FDFFFF lea eax, dword ptr [ebp-268]
00448915 BA 02000000 mov edx, 2
0044891A E8 71890F00 call <sub_541290>
0044891F 8B8D 6CFDFFFF mov ecx, dword ptr [ebp-294]
00448925 8B81 F8190000 mov eax, dword ptr [ecx+19F8]
0044892B E8 90F50D00 call <sub_527EC0>
00448930 66:C785 80FDFFF>mov word ptr [ebp-280], 5CC
00448939 8D85 94FDFFFF lea eax, dword ptr [ebp-26C]
0044893F E8 1490FBFF call <unknown_libname_55>
00448944 FF85 8CFDFFFF inc dword ptr [ebp-274]
0044894A E8 49F50D00 call <@GetCurrentDir$qqrv>
0044894F 8D95 94FDFFFF lea edx, dword ptr [ebp-26C]
00448955 8D45 FC lea eax, dword ptr [ebp-4]
00448958 E8 63890F00 call <sub_5412C0>
0044895D FF8D 8CFDFFFF dec dword ptr [ebp-274]
00448963 8D85 94FDFFFF lea eax, dword ptr [ebp-26C]
00448969 BA 02000000 mov edx, 2
0044896E E8 1D890F00 call <sub_541290>
00448973 8B85 6CFDFFFF mov eax, dword ptr [ebp-294]
00448979 05 F8190000 add eax, 19F8
0044897E E8 2997FBFF call <sub_4020AC>
00448983 8BF8 mov edi, eax
00448985 33C0 xor eax, eax
00448987 83C9 FF or ecx, FFFFFFFF
0044898A 8DB5 4CF4FFFF lea esi, dword ptr [ebp-BB4]
00448990 F2:AE repne scas byte ptr es:[edi]
00448992 F7D1 not ecx
00448994 2BF9 sub edi, ecx
00448996 8BD1 mov edx, ecx
00448998 87F7 xchg edi, esi
0044899A C1E9 02 shr ecx, 2
0044899D 8BC7 mov eax, edi
0044899F F3:A5 rep movs dword ptr es:[edi], dword ptr [e>
004489A1 8BCA mov ecx, edx
004489A3 8D85 4CF4FFFF lea eax, dword ptr [ebp-BB4]
004489A9 83E1 03 and ecx, 3
004489AC F3:A4 rep movs byte ptr es:[edi], byte ptr [esi>
004489AE 68 13D75500 push 0055D713 ; ASCII "mf.exe "
004489B3 50 push eax
004489B4 E8 8F9E0E00 call <_strcat>
004489B9 83C4 08 add esp, 8
004489BC 6A 00 push 0
004489BE 8D95 4CF4FFFF lea edx, dword ptr [ebp-BB4]
004489C4 52 push edx
004489C5 E8 A2D01000 call <WinExec> ; jmp 到 kernel32.WinExec
004489CA FF8D 8CFDFFFF dec dword ptr [ebp-274]
004489D0 8D45 F4 lea eax, dword ptr [ebp-C]
004489D3 BA 02000000 mov edx, 2
004489D8 E8 B3880F00 call <sub_541290>
004489DD FF8D 8CFDFFFF dec dword ptr [ebp-274]
004489E3 8D45 F8 lea eax, dword ptr [ebp-8]
004489E6 BA 02000000 mov edx, 2
004489EB E8 A0880F00 call <sub_541290>
004489F0 FF8D 8CFDFFFF dec dword ptr [ebp-274]
004489F6 8D45 FC lea eax, dword ptr [ebp-4]
004489F9 BA 02000000 mov edx, 2
004489FE E8 8D880F00 call <sub_541290>
00448A03 8B8D 70FDFFFF mov ecx, dword ptr [ebp-290]
00448A09 64:890D 0000000>mov dword ptr fs:[0], ecx
00448A10 > 5F pop edi
00448A11 5E pop esi
00448A12 5B pop ebx
00448A13 8BE5 mov esp, ebp
00448A15 5D pop ebp
00448A16 C3 retn
00448A17 0000 add byte ptr [eax], al
00448A19 0000 add byte ptr [eax], al
00448A1B 40 inc eax
00448A1C > 0000 add byte ptr [eax], al
00448A1E 2041 67 and byte ptr [ecx+67], al
00448A21 B4 14 mov ah, 14
00448A23 B8 AF42E587 mov eax, 87E542AF
00448A28 EE out dx, al
00448A29 3F aas
00448A2A 0000 add byte ptr [eax], al
00448A2C > AA stos byte ptr es:[edi]
00448A2D F1 int1
00448A2E D24D 62 ror byte ptr [ebp+62], cl
00448A31 10E4 adc ah, ah
00448A33 3F aas
00448A34 > 0000 add byte ptr [eax], al
00448A36 C03F 55 sar byte ptr [edi], 55
00448A39 8BEC mov ebp, esp
00448A3B 81C4 F8FEFFFF add esp, -108
00448A41 B8 9C2C5700 mov eax, 00572C9C
00448A46 53 push ebx
00448A47 E8 8CA10E00 call <@__InitExceptBlockLDTC>
00448A4C C745 F4 0100000>mov dword ptr [ebp-C], 1
00448A53 8D55 0C lea edx, dword ptr [ebp+C]
00448A56 8D45 0C lea eax, dword ptr [ebp+C]
00448A59 E8 BE850F00 call <@System@AnsiString@$bctr$qqrrx17Syst>
00448A5E FF45 F4 inc dword ptr [ebp-C]
00448A61 8D55 AC lea edx, dword ptr [ebp-54]
00448A64 66:C745 E8 0800 mov word ptr [ebp-18], 8
00448A6A 6A 2C push 2C
00448A6C 6A 00 push 0
00448A6E 52 push edx
00448A6F E8 309D0E00 call <_memset>
00448A74 83C4 0C add esp, 0C
00448A77 8D8D F8FEFFFF lea ecx, dword ptr [ebp-108]
00448A7D 68 B4000000 push 0B4
00448A82 6A 00 push 0
00448A84 51 push ecx
00448A85 E8 1A9D0E00 call <_memset>
00448A8A 83C4 0C add esp, 0C
00448A8D 8D45 0C lea eax, dword ptr [ebp+C]
00448A90 68 5C035600 push 0056035C ; ASCII "rb"
00448A95 E8 1296FBFF call <sub_4020AC>
00448A9A 50 push eax
00448A9B E8 D0BB0E00 call <_fopen>
00448AA0 83C4 08 add esp, 8
00448AA3 8BD8 mov ebx, eax
00448AA5 85C0 test eax, eax
00448AA7 75 5E jnz short <loc_448B07>
00448AA9 66:C745 E8 1400 mov word ptr [ebp-18], 14
00448AAF 8D45 FC lea eax, dword ptr [ebp-4]
00448AB2 E8 A18EFBFF call <unknown_libname_55>
00448AB7 8BC8 mov ecx, eax
00448AB9 FF45 F4 inc dword ptr [ebp-C]
00448ABC 8D55 0C lea edx, dword ptr [ebp+C]
00448ABF B8 5F035600 mov eax, 0056035F
00448AC4 E8 EF8B0F00 call <@System@$badd$qqrpxcrx17System@AnsiS>
00448AC9 8D45 FC lea eax, dword ptr [ebp-4]
00448ACC 8B00 mov eax, dword ptr [eax]
00448ACE E8 D1F10A00 call <@Dialogs@ShowMessage$qqrx17System@An>
00448AD3 FF4D F4 dec dword ptr [ebp-C]
00448AD6 8D45 FC lea eax, dword ptr [ebp-4]
00448AD9 BA 02000000 mov edx, 2
00448ADE E8 AD870F00 call <sub_541290>
00448AE3 83C8 FF or eax, FFFFFFFF
00448AE6 BA 02000000 mov edx, 2
00448AEB 50 push eax
00448AEC 8D45 0C lea eax, dword ptr [ebp+C]
00448AEF FF4D F4 dec dword ptr [ebp-C]
00448AF2 E8 99870F00 call <sub_541290>
00448AF7 58 pop eax
00448AF8 8B55 D8 mov edx, dword ptr [ebp-28]
00448AFB 64:8915 0000000>mov dword ptr fs:[0], edx
00448B02 E9 C0000000 jmp <loc_448BC7>
00448B07 > 6A 02 push 2
00448B09 6A D4 push -2C
00448B0B 53 push ebx
00448B0C E8 B3BE0E00 call <_fseek>
00448B11 83C4 0C add esp, 0C
00448B14 53 push ebx
00448B15 6A 01 push 1
00448B17 6A 2C push 2C
00448B19 8D4D AC lea ecx, dword ptr [ebp-54]
00448B1C 51 push ecx
00448B1D E8 C6BD0E00 call <_fread>
00448B22 C645 D5 00 mov byte ptr [ebp-2B], 0
00448B26 83C4 10 add esp, 10
00448B29 8D45 CC lea eax, dword ptr [ebp-34]
00448B2C BA 10775500 mov edx, 00557710 ; ASCII "pmlxzjtlx"
00448B31 > 8A08 mov cl, byte ptr [eax]
00448B33 3A0A cmp cl, byte ptr [edx]
00448B35 75 16 jnz short <loc_448B4D>
00448B37 84C9 test cl, cl
00448B39 74 3C je short <loc_448B77>
00448B3B 8A48 01 mov cl, byte ptr [eax+1]
00448B3E 3A4A 01 cmp cl, byte ptr [edx+1]
00448B41 75 0A jnz short <loc_448B4D>
00448B43 83C0 02 add eax, 2
00448B46 83C2 02 add edx, 2
00448B49 84C9 test cl, cl
00448B4B ^ 75 E4 jnz short <loc_448B31>
00448B4D > 74 28 je short <loc_448B77>
00448B4F 53 push ebx
00448B50 E8 AFB70E00 call <_fclose>
00448B55 59 pop ecx
00448B56 83C8 FF or eax, FFFFFFFF
00448B59 50 push eax
00448B5A FF4D F4 dec dword ptr [ebp-C]
00448B5D 8D45 0C lea eax, dword ptr [ebp+C]
00448B60 BA 02000000 mov edx, 2
00448B65 E8 26870F00 call <sub_541290>
00448B6A 58 pop eax
00448B6B 8B55 D8 mov edx, dword ptr [ebp-28]
00448B6E 64:8915 0000000>mov dword ptr fs:[0], edx
00448B75 EB 50 jmp short <loc_448BC7>
00448B77 > 6A 02 push 2
00448B79 68 20FFFFFF push -0E0
00448B7E 53 push ebx
00448B7F E8 40BE0E00 call <_fseek>
00448B84 83C4 0C add esp, 0C
00448B87 53 push ebx
00448B88 6A 01 push 1
00448B8A 68 B4000000 push 0B4
00448B8F 8D8D F8FEFFFF lea ecx, dword ptr [ebp-108]
00448B95 51 push ecx
00448B96 E8 4DBD0E00 call <_fread>
00448B9B 83C4 10 add esp, 10
00448B9E 53 push ebx
00448B9F E8 60B70E00 call <_fclose>
00448BA4 59 pop ecx
00448BA5 8B85 48FFFFFF mov eax, dword ptr [ebp-B8]
00448BAB 50 push eax
00448BAC FF4D F4 dec dword ptr [ebp-C]
00448BAF 8D45 0C lea eax, dword ptr [ebp+C]
00448BB2 BA 02000000 mov edx, 2
00448BB7 E8 D4860F00 call <sub_541290>
00448BBC 58 pop eax
00448BBD 8B55 D8 mov edx, dword ptr [ebp-28]
00448BC0 64:8915 0000000>mov dword ptr fs:[0], edx
00448BC7 > 5B pop ebx
00448BC8 8BE5 mov esp, ebp
00448BCA 5D pop ebp
00448BCB C3 retn
00448BCC > 55 push ebp
00448BCD 8BEC mov ebp, esp
00448BCF 83C4 A8 add esp, -58
00448BD2 B8 DC2C5700 mov eax, 00572CDC
00448BD7 53 push ebx
00448BD8 E8 FB9F0E00 call <@__InitExceptBlockLDTC>
00448BDD C745 F4 0100000>mov dword ptr [ebp-C], 1
00448BE4 8D55 0C lea edx, dword ptr [ebp+C]
00448BE7 8D45 0C lea eax, dword ptr [ebp+C]
00448BEA E8 2D840F00 call <@System@AnsiString@$bctr$qqrrx17Syst>
00448BEF FF45 F4 inc dword ptr [ebp-C]
00448BF2 8D55 A8 lea edx, dword ptr [ebp-58]
00448BF5 66:C745 E8 0800 mov word ptr [ebp-18], 8
00448BFB 6A 2C push 2C
00448BFD 6A 00 push 0
00448BFF 52 push edx
00448C00 E8 9F9B0E00 call <_memset>
00448C05 83C4 0C add esp, 0C
00448C08 8D45 0C lea eax, dword ptr [ebp+C]
00448C0B 68 6D035600 push 0056036D ; ASCII "rb"
00448C10 E8 9794FBFF call <sub_4020AC>
00448C15 50 push eax
00448C16 E8 55BA0E00 call <_fopen>
00448C1B 83C4 08 add esp, 8
00448C1E 8BD8 mov ebx, eax
00448C20 85C0 test eax, eax
00448C22 75 5D jnz short <loc_448C81>
00448C24 66:C745 E8 1400 mov word ptr [ebp-18], 14
00448C2A 8D45 FC lea eax, dword ptr [ebp-4]
00448C2D E8 268DFBFF call <unknown_libname_55>
00448C32 8BC8 mov ecx, eax
00448C34 FF45 F4 inc dword ptr [ebp-C]
00448C37 8D55 0C lea edx, dword ptr [ebp+C]
00448C3A B8 70035600 mov eax, 00560370
00448C3F E8 748A0F00 call <@System@$badd$qqrpxcrx17System@AnsiS>
00448C44 8D45 FC lea eax, dword ptr [ebp-4]
00448C47 8B00 mov eax, dword ptr [eax]
00448C49 E8 56F00A00 call <@Dialogs@ShowMessage$qqrx17System@An>
00448C4E FF4D F4 dec dword ptr [ebp-C]
00448C51 8D45 FC lea eax, dword ptr [ebp-4]
00448C54 BA 02000000 mov edx, 2
00448C59 E8 32860F00 call <sub_541290>
00448C5E 33C0 xor eax, eax
00448C60 BA 02000000 mov edx, 2
00448C65 50 push eax
00448C66 8D45 0C lea eax, dword ptr [ebp+C]
00448C69 FF4D F4 dec dword ptr [ebp-C]
00448C6C E8 1F860F00 call <sub_541290>
00448C71 58 pop eax
00448C72 8B55 D8 mov edx, dword ptr [ebp-28]
00448C75 64:8915 0000000>mov dword ptr fs:[0], edx
00448C7C E9 8F000000 jmp <loc_448D10>
00448C81 > 6A 02 push 2
00448C83 6A D4 push -2C
00448C85 53 push ebx
00448C86 E8 39BD0E00 call <_fseek>
00448C8B 83C4 0C add esp, 0C
00448C8E 53 push ebx
00448C8F 6A 01 push 1
00448C91 6A 2C push 2C
00448C93 8D4D A8 lea ecx, dword ptr [ebp-58]
00448C96 51 push ecx
00448C97 E8 4CBC0E00 call <_fread>
00448C9C 83C4 10 add esp, 10
00448C9F 6A 00 push 0
00448CA1 8B45 C4 mov eax, dword ptr [ebp-3C]
00448CA4 50 push eax
00448CA5 53 push ebx
00448CA6 E8 19BD0E00 call <_fseek>
00448CAB 83C4 0C add esp, 0C
00448CAE 53 push ebx
00448CAF 6A 01 push 1
00448CB1 6A 04 push 4
00448CB3 8D55 D4 lea edx, dword ptr [ebp-2C]
00448CB6 52 push edx
00448CB7 E8 2CBC0E00 call <_fread>
00448CBC 83C4 10 add esp, 10
00448CBF 837D D4 00 cmp dword ptr [ebp-2C], 0
00448CC3 74 15 je short <loc_448CDA>
00448CC5 837D D4 00 cmp dword ptr [ebp-2C], 0
00448CC9 7E 0F jle short <loc_448CDA>
00448CCB 6A 00 push 0
00448CCD 8B4D D4 mov ecx, dword ptr [ebp-2C]
00448CD0 51 push ecx
00448CD1 53 push ebx
00448CD2 E8 EDBC0E00 call <_fseek>
00448CD7 83C4 0C add esp, 0C
00448CDA > 53 push ebx
00448CDB 6A 01 push 1
00448CDD 6A 28 push 28
00448CDF 8B45 10 mov eax, dword ptr [ebp+10]
00448CE2 50 push eax
00448CE3 E8 00BC0E00 call <_fread>
00448CE8 83C4 10 add esp, 10
00448CEB 53 push ebx
00448CEC E8 13B60E00 call <_fclose>
00448CF1 59 pop ecx
00448CF2 B0 01 mov al, 1
00448CF4 50 push eax
00448CF5 FF4D F4 dec dword ptr [ebp-C]
00448CF8 8D45 0C lea eax, dword ptr [ebp+C]
00448CFB BA 02000000 mov edx, 2
00448D00 E8 8B850F00 call <sub_541290>
00448D05 58 pop eax
00448D06 8B55 D8 mov edx, dword ptr [ebp-28]
00448D09 64:8915 0000000>mov dword ptr fs:[0], edx
00448D10 > 5B pop ebx
00448D11 8BE5 mov esp, ebp
00448D13 5D pop ebp
00448D14 C3 retn
00448D15 90 nop
00448D16 90 nop
00448D17 90 nop
00448D18 > 55 push ebp
00448D19 8BEC mov ebp, esp
00448D1B 83C4 A8 add esp, -58
00448D1E B8 1C2D5700 mov eax, 00572D1C
00448D23 53 push ebx
00448D24 E8 AF9E0E00 call <@__InitExceptBlockLDTC>
00448D29 C745 F4 0100000>mov dword ptr [ebp-C], 1
00448D30 8D55 0C lea edx, dword ptr [ebp+C]
00448D33 8D45 0C lea eax, dword ptr [ebp+C]
00448D36 E8 E1820F00 call <@System@AnsiString@$bctr$qqrrx17Syst>
00448D3B FF45 F4 inc dword ptr [ebp-C]
00448D3E 8D55 A8 lea edx, dword ptr [ebp-58]
00448D41 66:C745 E8 0800 mov word ptr [ebp-18], 8
00448D47 6A 2C push 2C
00448D49 6A 00 push 0
00448D4B 52 push edx
00448D4C E8 539A0E00 call <_memset>
00448D51 83C4 0C add esp, 0C
00448D54 8D45 0C lea eax, dword ptr [ebp+C]
00448D57 68 7E035600 push 0056037E ; ASCII "rb"
00448D5C E8 4B93FBFF call <sub_4020AC>
00448D61 50 push eax
00448D62 E8 09B90E00 call <_fopen>
00448D67 83C4 08 add esp, 8
00448D6A 8BD8 mov ebx, eax
00448D6C 85C0 test eax, eax
00448D6E 75 5D jnz short <loc_448DCD>
00448D70 66:C745 E8 1400 mov word ptr [ebp-18], 14
00448D76 8D45 FC lea eax, dword ptr [ebp-4]
00448D79 E8 DA8BFBFF call <unknown_libname_55>
00448D7E 8BC8 mov ecx, eax
00448D80 FF45 F4 inc dword ptr [ebp-C]
00448D83 8D55 0C lea edx, dword ptr [ebp+C]
00448D86 B8 81035600 mov eax, 00560381
00448D8B E8 28890F00 call <@System@$badd$qqrpxcrx17System@AnsiS>
00448D90 8D45 FC lea eax, dword ptr [ebp-4]
00448D93 8B00 mov eax, dword ptr [eax]
00448D95 E8 0AEF0A00 call <@Dialogs@ShowMessage$qqrx17System@An>
00448D9A FF4D F4 dec dword ptr [ebp-C]
00448D9D 8D45 FC lea eax, dword ptr [ebp-4]
00448DA0 BA 02000000 mov edx, 2
00448DA5 E8 E6840F00 call <sub_541290>
00448DAA 33C0 xor eax, eax
00448DAC BA 02000000 mov edx, 2
00448DB1 50 push eax
00448DB2 8D45 0C lea eax, dword ptr [ebp+C]
00448DB5 FF4D F4 dec dword ptr [ebp-C]
00448DB8 E8 D3840F00 call <sub_541290>
00448DBD 58 pop eax
00448DBE 8B55 D8 mov edx, dword ptr [ebp-28]
00448DC1 64:8915 0000000>mov dword ptr fs:[0], edx
00448DC8 E9 89000000 jmp <loc_448E56>
00448DCD > 6A 02 push 2
00448DCF 6A D4 push -2C
00448DD1 53 push ebx
00448DD2 E8 EDBB0E00 call <_fseek>
00448DD7 83C4 0C add esp, 0C
00448DDA 53 push ebx
00448DDB 6A 01 push 1
00448DDD 6A 2C push 2C
00448DDF 8D4D A8 lea ecx, dword ptr [ebp-58]
00448DE2 51 push ecx
00448DE3 E8 00BB0E00 call <_fread>
00448DE8 83C4 10 add esp, 10
00448DEB 6A 00 push 0
00448DED 8B45 C4 mov eax, dword ptr [ebp-3C]
00448DF0 50 push eax
00448DF1 53 push ebx
00448DF2 E8 CDBB0E00 call <_fseek>
00448DF7 83C4 0C add esp, 0C
00448DFA 53 push ebx
00448DFB 6A 01 push 1
00448DFD 6A 04 push 4
00448DFF 8D55 D4 lea edx, dword ptr [ebp-2C]
00448E02 52 push edx
00448E03 E8 E0BA0E00 call <_fread>
00448E08 83C4 10 add esp, 10
00448E0B 53 push ebx
00448E0C E8 F3B40E00 call <_fclose>
00448E11 837D D4 00 cmp dword ptr [ebp-2C], 0
00448E15 59 pop ecx
00448E16 74 20 je short <loc_448E38>
00448E18 B0 01 mov al, 1
00448E1A BA 02000000 mov edx, 2
00448E1F 50 push eax
00448E20 8D45 0C lea eax, dword ptr [ebp+C]
00448E23 FF4D F4 dec dword ptr [ebp-C]
00448E26 E8 65840F00 call <sub_541290>
00448E2B 58 pop eax
00448E2C 8B55 D8 mov edx, dword ptr [ebp-28]
00448E2F 64:8915 0000000>mov dword ptr fs:[0], edx
00448E36 EB 1E jmp short <loc_448E56>
00448E38 > 33C0 xor eax, eax
00448E3A BA 02000000 mov edx, 2
00448E3F 50 push eax
00448E40 8D45 0C lea eax, dword ptr [ebp+C]
00448E43 FF4D F4 dec dword ptr [ebp-C]
00448E46 E8 45840F00 call <sub_541290>
00448E4B 58 pop eax
00448E4C 8B55 D8 mov edx, dword ptr [ebp-28]
00448E4F 64:8915 0000000>mov dword ptr fs:[0], edx
00448E56 > 5B pop ebx
00448E57 8BE5 mov esp, ebp
00448E59 5D pop ebp
00448E5A C3 retn
跟入 00447EA4 call <sub_44BA68>
0044BA68 > 55 push ebp
0044BA69 8BEC mov ebp, esp
0044BA6B 83C4 D0 add esp, -30
0044BA6E B8 34375700 mov eax, 00573734
0044BA73 53 push ebx
0044BA74 56 push esi
0044BA75 57 push edi
0044BA76 E8 5D710E00 call <@__InitExceptBlockLDTC>
0044BA7B C745 F8 0100000>mov dword ptr [ebp-8], 1
0044BA82 8D55 0C lea edx, dword ptr [ebp+C]
0044BA85 8D45 0C lea eax, dword ptr [ebp+C]
0044BA88 E8 8F550F00 call <@System@AnsiString@$bctr$qq>
0044BA8D FF45 F8 inc dword ptr [ebp-8]
0044BA90 66:C745 EC 0800 mov word ptr [ebp-14], 8
0044BA96 66:C745 EC 1400 mov word ptr [ebp-14], 14
0044BA9C 8D45 0C lea eax, dword ptr [ebp+C]
0044BA9F E8 4C5B0F00 call <@System@AnsiString@ToDouble>; 跟入
0044BAA4 D95D D8 fstp dword ptr [ebp-28]
0044BAA7 66:C745 EC 0800 mov word ptr [ebp-14], 8
0044BAAD EB 10 jmp short <loc_44BABF>
0044BAAF > 33D2 xor edx, edx
0044BAB1 8955 D8 mov dword ptr [ebp-28], edx
0044BAB4 66:C745 EC 1C00 mov word ptr [ebp-14], 1C
0044BABA E8 17260F00 call <@_CatchCleanup$qv>
0044BABF > D945 D8 fld dword ptr [ebp-28]
0044BAC2 DD5D D0 fstp qword ptr [ebp-30]
0044BAC5 FF4D F8 dec dword ptr [ebp-8]
0044BAC8 8D45 0C lea eax, dword ptr [ebp+C]
0044BACB BA 02000000 mov edx, 2
0044BAD0 E8 BB570F00 call <sub_541290>
0044BAD5 DD45 D0 fld qword ptr [ebp-30]
0044BAD8 8B4D DC mov ecx, dword ptr [ebp-24]
0044BADB 64:890D 0000000>mov dword ptr fs:[0], ecx
0044BAE2 5F pop edi
0044BAE3 5E pop esi
0044BAE4 5B pop ebx
0044BAE5 8BE5 mov esp, ebp
0044BAE7 5D pop ebp
0044BAE8 C3 retn
跟入 0044BA9F E8 4C5B0F00 call <@System@AnsiString@ToDouble>
005415F0 > 55 push ebp
005415F1 8BEC mov ebp, esp
005415F3 83C4 D0 add esp, -30
005415F6 53 push ebx
005415F7 8BD8 mov ebx, eax
005415F9 B8 D4C75900 mov eax, 0059C7D4
005415FE E8 D515FFFF call <@__InitExceptBlockLDTC>
00541603 66:C745 E8 0800 mov word ptr [ebp-18], 8
00541609 8D45 FC lea eax, dword ptr [ebp-4]
0054160C 8BD3 mov edx, ebx
0054160E E8 09FAFFFF call <@System@AnsiString@$bctr$qq>
00541613 FF45 F4 inc dword ptr [ebp-C]
00541616 8B00 mov eax, dword ptr [eax]
00541618 E8 5771FEFF call <@Sysutils@StrToFloat$qqrx17>; 跟入
0054161D DD5D D0 fstp qword ptr [ebp-30]
00541620 FF4D F4 dec dword ptr [ebp-C]
00541623 8D45 FC lea eax, dword ptr [ebp-4]
00541626 BA 02000000 mov edx, 2
0054162B E8 60FCFFFF call <sub_541290>
00541630 DD45 D0 fld qword ptr [ebp-30]
00541633 8B4D D8 mov ecx, dword ptr [ebp-28]
00541636 64:67:890E 0000 mov dword ptr fs:[0], ecx
0054163C 5B pop ebx
0054163D 8BE5 mov esp, ebp
0054163F 5D pop ebp
00541640 C3 retn
跟入 00541618 E8 5771FEFF call <@Sysutils@StrToFloat$qqrx17>
00528774 > 53 push ebx
00528775 83C4 EC add esp, -14
00528778 8BD8 mov ebx, eax
0052877A 8BC3 mov eax, ebx
0052877C E8 C3770000 call <unknown_libname_642>
00528781 8BD4 mov edx, esp
00528783 33C9 xor ecx, ecx
00528785 E8 8AE0FFFF call <sub_526814> ; 跟入
0052878A 84C0 test al, al
0052878C 75 19 jnz short <loc_5287A7>
0052878E 895C24 0C mov dword ptr [esp+C], ebx
00528792 C64424 10 0B mov byte ptr [esp+10], 0B
00528797 8D5424 0C lea edx, dword ptr [esp+C]
0052879B A1 ECD95900 mov eax, dword ptr [59D9EC]
005287A0 33C9 xor ecx, ecx
005287A2 E8 B5ECFFFF call <@SysUtils@_16482>
005287A7 > DB2C24 fld tbyte ptr [esp]
005287AA 83C4 14 add esp, 14
005287AD 5B pop ebx
005287AE C3 retn
跟入 00528785 E8 8AE0FFFF call <sub_526814>
00526814 > 55 push ebp
00526815 8BEC mov ebp, esp
00526817 83EC 06 sub esp, 6
0052681A 57 push edi
0052681B 56 push esi
0052681C 53 push ebx
0052681D 8BF0 mov esi, eax
0052681F 8BFA mov edi, edx
00526821 8BD9 mov ebx, ecx
00526823 9B wait
00526824 D97D FA fstcw word ptr [ebp-6]
00526827 9B wait
00526828 DBE2 fclex
0052682A D92D 6A605200 fldcw word ptr [<word_52606A>
00526830 D9EE fldz
00526832 E8 88000000 call <sub_5268BF> ; 检测是否为空
00526837 8A3E mov bh, byte ptr [esi]
00526839 80FF 2B cmp bh, 2B
0052683C 74 05 je short <loc_526843>
0052683E 80FF 2D cmp bh, 2D
00526841 75 01 jnz short <loc_526844>
00526843 > 46 inc esi
00526844 > 8BCE mov ecx, esi
00526846 E8 7F000000 call <sub_5268CA> ; flash转换时关键算法跟入
0052684B 33D2 xor edx, edx
0052684D 8A06 mov al, byte ptr [esi]
0052684F 3A05 D7855A00 cmp al, byte ptr [5A85D7]
00526855 75 08 jnz short <loc_52685F>
00526857 46 inc esi
00526858 E8 6D000000 call <sub_5268CA>
0052685D F7DA neg edx
0052685F > 3BCE cmp ecx, esi
00526861 74 4A je short <loc_5268AD>
00526863 8A06 mov al, byte ptr [esi]
00526865 24 DF and al, 0DF
00526867 3C 45 cmp al, 45
00526869 75 0A jnz short <loc_526875>
0052686B 46 inc esi
0052686C 52 push edx
0052686D E8 74000000 call <sub_5268E6>
00526872 58 pop eax
00526873 03D0 add edx, eax
00526875 > E8 45000000 call <sub_5268BF>
0052687A 803E 00 cmp byte ptr [esi], 0
0052687D 75 2E jnz short <loc_5268AD>
0052687F 8BC2 mov eax, edx
00526881 80FB 01 cmp bl, 1
00526884 75 03 jnz short <loc_526889>
00526886 83C0 04 add eax, 4
00526889 > E8 82640000 call <@System@@Pow10$qqrv>
0052688E 80FF 2D cmp bh, 2D
00526891 75 02 jnz short <loc_526895>
00526893 D9E0 fchs
00526895 > 80FB 00 cmp bl, 0
00526898 74 04 je short <loc_52689E>
0052689A DF3F fistp qword ptr [edi]
0052689C EB 02 jmp short <loc_5268A0>
0052689E > DB3F fstp tbyte ptr [edi]
005268A0 > 9B wait
005268A1 DFE0 fstsw ax
005268A3 66:A9 0900 test ax, 9
005268A7 75 06 jnz short <loc_5268AF>
005268A9 B0 01 mov al, 1
005268AB EB 04 jmp short <loc_5268B1>
005268AD > DDD8 fstp st(0)
005268AF > 33C0 xor eax, eax
005268B1 > 9B wait
005268B2 DBE2 fclex
005268B4 D96D FA fldcw word ptr [ebp-6]
005268B7 9B wait
005268B8 5B pop ebx
005268B9 5E pop esi
005268BA 5F pop edi
005268BB 8BE5 mov esp, ebp
005268BD 5D pop ebp
005268BE C3 retn
跟入00526846 E8 7F000000 call <sub_5268CA>
005268CA > 33C0 xor eax, eax
005268CC 33D2 xor edx, edx
005268CE > AC lods byte ptr [esi] ; 注册码的20位字串18-13位的算法把字串转换成数值
005268CF 2C 3A sub al, 3A
005268D1 04 0A add al, 0A
005268D3 73 0F jnb short <loc_5268E4>
005268D5 DA0D 50605200 fimul dword ptr [<dword_526050>]
005268DB 8945 FC mov dword ptr [ebp-4], eax
005268DE DA45 FC fiadd dword ptr [ebp-4]
005268E1 42 inc edx
005268E2 ^ EB EA jmp short <loc_5268CE>
005268E4 > 4E dec esi
005268E5 C3 retn
通过这两篇就能追出前50位注册码的1-14位，17-22位，25-36位，39-40位的注册码。
--------------------------------------------------------------------------------
2009年09月12日 19:05:49
[ 本帖最后由 fghtiger 于 2009-9-15 13:44 编辑 ] |
评分
-
查看全部评分
|
IP卡
发表于 2009-9-15 09:08:49
提升卡
置顶卡
变色卡
千斤顶
显身卡
发表于 2009-9-15 09:48:57
发表于 2009-9-15 12:12:43
发表于 2009-9-24 01:27:45
发表于 2009-10-6 00:59:23
楼主
发表于 2009-10-10 15:04:36
