RMReport3.51破解手札㈡

 前文再续，书接上一回。

 破解步骤二——代码分析：
　　在跟踪过程发现，RMReport对打印的限制来自于rm_class.dcu文件，通过Dcu2Pas对rm_class.dcu反翻译得到_DoPrintReport函数的汇编源码，再结合D6对汇编代码的跟踪，得到如下的关键源码段：

1.   procedure _DoPrintReport;
2.   var
3.     i: Integer;
4.     j: Integer;
5.     lipgList: TStringList;
6.     lPrinter: TRMPrinter;
7.     liNeedNewPage: Boolean;
8.     lFactorX: Double;
9.     lFactorY: Double;
10.     lSavePrintInfo: TRMPageInfo;
11.     lOldPageNumber: Integer;
12.     lPageWidth: Integer;
13.     lPageHeight: Integer;
14.   asm
15.     @@474: {8D 53 58                } lea     edx, [ebx+$58]                   
16.     @@477: {8B 45 F0                } mov     eax, [ebp-$10]                   
17.     @@480: {E8 00 00 00 00          } call    TRMPrinter.FillPrinterInfo       
18.     @@485: {8B 45 F0                } mov     eax, [ebp-$10]                   
19.     @@488: {E8 00 00 00 00          } call    TRMCustomPrinter.BeginDoc        
20.     @@493: {8B 45 08                } mov     eax, [ebp+$08]                   
21.     @@496: {80 78 0C 00             } cmp     byte ptr [eax+$0C], $00          
22.     @@500: {74 4D                   } jz      @@579                            
23. ---------------------------------------------------------------------好戏开场，逐份打印方式
24.     @@502: {33 DB                   } xor     ebx, ebx                         
25.     @@504: {EB 33                   } jmp     @@557                            
26.     @@506: {55                      } push    ebp               -----12F56C
27.     @@507: {33 C0                   } xor     eax, eax                         
28.     @@509: {E8 00 00 00 00          } call    _CanPrint         ------EAX=1,EBX=0,ECX=0,EDX=12F504
29.     @@514: {59                      } pop     ecx                              
30.     @@515: {84 C0                   } test    al, al            -----if _CanPrint then _PrintOnePage(....)
31.     @@517: {74 09                   } jz      @@