Quick Search of Button events in any version of Delphi

For newer versions of delphi, you cannot use DEDE to find button events. Here I find a quick way to find button events.
Use OD to load a small program written in Delphi 2009, ctrl + g to 401000,
 
00401000./04104000 DD Project1.00401004
00401004 \ 03 DB 03
00401005. 07 DB 07
00401006. 42 6F 6F 6C 6> ASCII "Boolean"
0040100D 01 DB 01
0040100E 00 DB 00
 
 
Ctrl + B search Button1Click is case-insensitive,
Www.2cto.com
 
// Button1Click event
0046E326. 42 75 74 74 6> ASCII "Button1Click"
0046E332 12 DB 12
0046E333 00 DB 00
0046E334. C4E34600 DD Project1.0046E3C4
0046E338. 0B DB 0B
 
// Edit1Change event
0046E339. 45 64 69 74 3> ASCII "Edit1Change"
0046E344. 06 DB 06
0046E345. 54 46 6F 72 6> ASCII "TForm1"
0046E34B 03 DB 03
 
 
The first one is the button event entry:
 
0046E37C. B8 94E34600 mov eax, 0046E394; ASCII "Alias/fd"
0046E381. E8 02D7FCFF CALL 0043BA88
0046E386. C3 RETN
 
 
 
The second one is the Edit1Change event:
 
0046E3C4/. 55 PUSH EBP
0046E3C5 |. 8BEC mov ebp, ESP
0046E3C7 |. 6A 00 PUSH 0
0046E3C9 |. 53 PUSH EBX
0046E3CA |. 8BD8 mov ebx, EAX
0046E3CC |. 33C0 xor eax, EAX
0046E3CE |. 55 PUSH EBP
0046E3CF |. 68 2FE44600 PUSH 0046E42F
0046E3D4 |. 64: FF30 push dword ptr fs: [EAX]
0046E3D7 |. 64: 8920 mov dword ptr fs: [EAX], ESP
0046E3DA |. 8D55 fc lea edx, dword ptr ss: [EBP-4]
0046E3DD |. 8B83 80030000 mov eax, dword ptr ds: [EBX + 380]
0046E3E3 |. E8 D8CDFDFF CALL 0044B1C0
0046E3E8 |. 8B45 fc mov eax, dword ptr ss: [EBP-4]
0046E3EB |. BA 48E44600 mov edx, 0046E448; UNICODE "12345"
0046E3F0 |. E8 4F76F9FF CALL 00405A44
0046E3F5 |. 75 12 jnz short 0046E409
0046E3F7 |. BA 60E44600 mov edx, 0046E460
0046E3FC |. 8B83 7C030000 mov eax, dword ptr ds: [EBX + 37C]
0046E402 |. E8 F1CDFDFF CALL 0044B1F8
0046E407 |. EB 10 jmp short 0046E419
0046E409 |> BA 7CE44600 mov edx, 0046E47C; UNICODE "Bad !!!!! "
0046E40E |. 8B83 7C030000 mov eax, dword ptr ds: [EBX + 37C]
0046E414 |. E8 dfcdfdff call 0044B1F8
 
 
If there are other events, continue to flip down. Here are two events.
This method can be used to deal with any version of the delphi Program. The shelling program may not work...


Author sunlulu