各位大哥,帮忙分析一下算法(Delphi 7)!是一个商业管理软件的注册算法,壳我已脱了我用DEDE反编后的编码,哪位高手帮忙一下分析可以的话帮我做个内存注册机!跪求
begin
(*
005EDEE4 55 push ebp
005EDEE5 8BEC mov ebp, esp
005EDEE7 33C9 xor ecx, ecx
005EDEE9 51 push ecx
005EDEEA 51 push ecx
005EDEEB 51 push ecx
005EDEEC 51 push ecx
005EDEED 51 push ecx
005EDEEE 53 push ebx
005EDEEF 56 push esi
005EDEF0 8BD8 mov ebx, eax
005EDEF2 33C0 xor eax, eax
005EDEF4 55 push ebp
005EDEF5 6884E15E00 push $005EE184
***** TRY
|
005EDEFA 64FF30 push dword ptr fs:[eax]
005EDEFD 648920 mov fs:[eax], esp
* Reference to pointer to GlobalVar_009C7588
|
005EDF00 A1DC329C00 mov eax, dword ptr [$009C32DC]
005EDF05 8B00 mov eax, [eax]
005EDF07 BA9CE15E00 mov edx, $005EE19C
* Reference to: System.@LStrCmp;
|
005EDF0C E8E774E1FF call 004053F8
005EDF11 7543 jnz 005EDF56
005EDF13 6A00 push $00
005EDF15 8D45F8 lea eax, [ebp-$08]
005EDF18 50 push eax
* Reference to pointer to GlobalVar_009C7594
|
005EDF19 A1302C9C00 mov eax, dword ptr [$009C2C30]
005EDF1E 8B00 mov eax, [eax]
* Possible String Reference to: '联系电话'
|
005EDF20 B9A8E15E00 mov ecx, $005EE1A8
* Possible String Reference to: 'lx'
|
005EDF25 BABCE15E00 mov edx, $005EE1BC
005EDF2A 8B30 mov esi, [eax]
005EDF2C FF16 call dword ptr [esi]
005EDF2E 8B45F8 mov eax, [ebp-$08]
005EDF31 8D55FC lea edx, [ebp-$04]
* Reference to: Unit_00408FCC.Proc_0040A068
|
005EDF34 E82FC1E1FF call 0040A068
005EDF39 8B55FC mov edx, [ebp-$04]
* Reference to control Trjzc_f.lb_tel : TLabel
|
005EDF3C 8B8330030000 mov eax, [ebx+$0330]
* Reference to: Controls.TControl.SetText(TControl;TCaption);
|
005EDF42 E8BD73E6FF call 00455304
005EDF47 BAAA010000 mov edx, $000001AA
* Reference to rjzc_f
|
005EDF4C A16C529C00 mov eax, dword ptr [$009C526C]
* Reference to: Controls.TControl.SetWidth(TControl;Integer);
|
005EDF51 E8126BE6FF call 00454A68
* Reference to pointer to GlobalVar_009C7598
|
005EDF56 A108339C00 mov eax, dword ptr [$009C3308]
005EDF5B 8B00 mov eax, [eax]
005EDF5D BAC8E15E00 mov edx, $005EE1C8
* Reference to: System.@LStrCmp;
|
005EDF62 E89174E1FF call 004053F8
005EDF67 755B jnz 005EDFC4
005EDF69 33D2 xor edx, edx
* Reference to control Trjzc_f.GroupBox1 : TGroupBox
|
005EDF6B 8B83F0020000 mov eax, [ebx+$02F0]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EDF71 E87E72E6FF call 004551F4
005EDF76 33D2 xor edx, edx
* Reference to control Trjzc_f.GroupBox2 : TGroupBox
|
005EDF78 8B83F4020000 mov eax, [ebx+$02F4]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EDF7E E87172E6FF call 004551F4
005EDF83 BA69000000 mov edx, $00000069
* Reference to control Trjzc_f.gb_hh : TGroupBox
|
005EDF88 8B8324030000 mov eax, [ebx+$0324]
* Reference to: Controls.TControl.SetLeft(TControl;Integer);
|
005EDF8E E8896AE6FF call 00454A1C
005EDF93 BAAA010000 mov edx, $000001AA
* Reference to rjzc_f
|
005EDF98 A16C529C00 mov eax, dword ptr [$009C526C]
* Reference to: Controls.TControl.SetWidth(TControl;Integer);
|
005EDF9D E8C66AE6FF call 00454A68
005EDFA2 33D2 xor edx, edx
* Reference to control Trjzc_f.bt_reg : TBitBtn
|
005EDFA4 8B8304030000 mov eax, [ebx+$0304]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EDFAA E84572E6FF call 004551F4
005EDFAF BA9E000000 mov edx, $0000009E
* Reference to control Trjzc_f.BitBtn2 : TBitBtn
|
005EDFB4 8B8308030000 mov eax, [ebx+$0308]
* Reference to: Controls.TControl.SetLeft(TControl;Integer);
|
005EDFBA E85D6AE6FF call 00454A1C
005EDFBF E9A5010000 jmp 005EE169
* Reference to: regdll.getid()
|
005EDFC4 E80B910F00 call 006E70D4
005EDFC9 8BD0 mov edx, eax
005EDFCB B874529C00 mov eax, $009C5274
* Reference to: System.@LStrFromPChar(String;String;PAnsiChar);
| or: System.@WStrFromPChar(WideString;WideString;PAnsiChar);
|
005EDFD0 E81772E1FF call 004051EC
005EDFD5 8D45F0 lea eax, [ebp-$10]
005EDFD8 50 push eax
005EDFD9 8D55EC lea edx, [ebp-$14]
* Possible String Reference to: 'djzqb'
|
005EDFDC B8D4E15E00 mov eax, $005EE1D4
* Reference to: Unit_006E7135.Proc_006F7058
|
005EDFE1 E872901000 call 006F7058
005EDFE6 8B45EC mov eax, [ebp-$14]
005EDFE9 B903000000 mov ecx, $00000003
005EDFEE BA02000000 mov edx, $00000002
* Reference to: System.@LStrCopy;
|
005EDFF3 E81475E1FF call 0040550C
005EDFF8 8B4DF0 mov ecx, [ebp-$10]
005EDFFB 8D45F4 lea eax, [ebp-$0C]
005EDFFE 8B1574529C00 mov edx, [$009C5274]
* Reference to: System.@LStrCat3;
|
005EE004 E8F772E1FF call 00405300
005EE009 8B55F4 mov edx, [ebp-$0C]
* Reference to control Trjzc_f.ed_user : TAdvEdit
|
005EE00C 8B83FC020000 mov eax, [ebx+$02FC]
* Reference to: AdvEdit.Proc_004F040C
|
005EE012 E8F523F0FF call 004F040C
* Reference to control Trjzc_f.ed_name : TAdvEdit
|
005EE017 8B83F8020000 mov eax, [ebx+$02F8]
005EE01D 8B10 mov edx, [eax]
* Possible reference to virtual method TAdvEdit.OFFS_00DC
|
005EE01F FF92DC000000 call dword ptr [edx+$00DC]
* Reference to control Trjzc_f.ed_reg : TAdvEdit
|
005EE025 8B8300030000 mov eax, [ebx+$0300]
005EE02B 8B10 mov edx, [eax]
* Possible reference to virtual method TAdvEdit.OFFS_00DC
|
005EE02D FF92DC000000 call dword ptr [edx+$00DC]
* Reference to control Trjzc_f.ed_name : TAdvEdit
|
005EE033 8B83F8020000 mov eax, [ebx+$02F8]
005EE039 8B10 mov edx, [eax]
* Possible reference to virtual method TAdvEdit.OFFS_00C0
|
005EE03B FF92C0000000 call dword ptr [edx+$00C0]
* Reference to pointer to GlobalVar_009C7588
|
005EE041 A1DC329C00 mov eax, dword ptr [$009C32DC]
005EE046 8B00 mov eax, [eax]
005EE048 BAC8E15E00 mov edx, $005EE1C8
* Reference to: System.@LStrCmp;
|
005EE04D E8A673E1FF call 004053F8
005EE052 7539 jnz 005EE08D
005EE054 B201 mov dl, $01
* Reference to control Trjzc_f.gb_hj : TGroupBox
|
005EE056 8B830C030000 mov eax, [ebx+$030C]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE05C E89371E6FF call 004551F4
005EE061 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_tk : TGroupBox
|
005EE063 8B8318030000 mov eax, [ebx+$0318]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE069 E88671E6FF call 004551F4
005EE06E 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_hh : TGroupBox
|
005EE070 8B8324030000 mov eax, [ebx+$0324]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE076 E87971E6FF call 004551F4
005EE07B 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_rx : TGroupBox
|
005EE07D 8B8340030000 mov eax, [ebx+$0340]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE083 E86C71E6FF call 004551F4
005EE088 E9DC000000 jmp 005EE169
* Reference to pointer to GlobalVar_009C7588
|
005EE08D A1DC329C00 mov eax, dword ptr [$009C32DC]
005EE092 8B00 mov eax, [eax]
005EE094 BAE4E15E00 mov edx, $005EE1E4
* Reference to: System.@LStrCmp;
|
005EE099 E85A73E1FF call 004053F8
005EE09E 7539 jnz 005EE0D9
005EE0A0 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_hj : TGroupBox
|
005EE0A2 8B830C030000 mov eax, [ebx+$030C]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE0A8 E84771E6FF call 004551F4
005EE0AD B201 mov dl, $01
* Reference to control Trjzc_f.gb_tk : TGroupBox
|
005EE0AF 8B8318030000 mov eax, [ebx+$0318]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE0B5 E83A71E6FF call 004551F4
005EE0BA 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_hh : TGroupBox
|
005EE0BC 8B8324030000 mov eax, [ebx+$0324]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE0C2 E82D71E6FF call 004551F4
005EE0C7 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_rx : TGroupBox
|
005EE0C9 8B8340030000 mov eax, [ebx+$0340]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE0CF E82071E6FF call 004551F4
005EE0D4 E990000000 jmp 005EE169
* Reference to pointer to GlobalVar_009C7588
|
005EE0D9 A1DC329C00 mov eax, dword ptr [$009C32DC]
005EE0DE 8B00 mov eax, [eax]
005EE0E0 BAF0E15E00 mov edx, $005EE1F0
* Reference to: System.@LStrCmp;
|
005EE0E5 E80E73E1FF call 004053F8
005EE0EA 7536 jnz 005EE122
005EE0EC 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_hj : TGroupBox
|
005EE0EE 8B830C030000 mov eax, [ebx+$030C]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE0F4 E8FB70E6FF call 004551F4
005EE0F9 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_tk : TGroupBox
|
005EE0FB 8B8318030000 mov eax, [ebx+$0318]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE101 E8EE70E6FF call 004551F4
005EE106 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_hh : TGroupBox
|
005EE108 8B8324030000 mov eax, [ebx+$0324]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE10E E8E170E6FF call 004551F4
005EE113 B201 mov dl, $01
* Reference to control Trjzc_f.gb_rx : TGroupBox
|
005EE115 8B8340030000 mov eax, [ebx+$0340]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE11B E8D470E6FF call 004551F4
005EE120 EB47 jmp 005EE169
* Reference to pointer to GlobalVar_009C7588
|
005EE122 A1DC329C00 mov eax, dword ptr [$009C32DC]
005EE127 8B00 mov eax, [eax]
005EE129 BAFCE15E00 mov edx, $005EE1FC
* Reference to: System.@LStrCmp;
|
005EE12E E8C572E1FF call 004053F8
005EE133 7534 jnz 005EE169
005EE135 B201 mov dl, $01
* Reference to control Trjzc_f.gb_hh : TGroupBox
|
005EE137 8B8324030000 mov eax, [ebx+$0324]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE13D E8B270E6FF call 004551F4
005EE142 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_hj : TGroupBox
|
005EE144 8B830C030000 mov eax, [ebx+$030C]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE14A E8A570E6FF call 004551F4
005EE14F 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_tk : TGroupBox
|
005EE151 8B8318030000 mov eax, [ebx+$0318]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE157 E89870E6FF call 004551F4
005EE15C 33D2 xor edx, edx
* Reference to control Trjzc_f.gb_rx : TGroupBox
|
005EE15E 8B8340030000 mov eax, [ebx+$0340]
* Reference to: Controls.TControl.SetVisible(TControl;Boolean);
|
005EE164 E88B70E6FF call 004551F4
005EE169 33C0 xor eax, eax
005EE16B 5A pop edx
005EE16C 59 pop ecx
005EE16D 59 pop ecx
005EE16E 648910 mov fs:[eax], edx
****** FINALLY
|
* Possible String Reference to: '^[嬪]?
|
005EE171 688BE15E00 push $005EE18B
005EE176 8D45EC lea eax, [ebp-$14]
005EE179 BA05000000 mov edx, $00000005
* Reference to: System.@LStrArrayClr(void;void;Integer);
|
005EE17E E89D6EE1FF call 00405020
005EE183 C3 ret
* Reference to: System.@HandleFinally;
|
005EE184 E91767E1FF jmp 004048A0
005EE189 EBEB jmp 005EE176
****** END
|
005EE18B 5E pop esi
005EE18C 5B pop ebx
005EE18D 8BE5 mov esp, ebp
005EE18F 5D pop ebp
005EE190 C3 ret
*)
end;
procedure Trjzc_f.BitBtn2Click(Sender : TObject);
begin
(*
* Reference to: Forms.TCustomForm.Close(TCustomForm);
|
005EE200 E84F4FE8FF call 00473154
005EE205 C3 ret
*)
end;
procedure Trjzc_f.bt_regClick(Sender : TObject);
begin
(*
005EE208 55 push ebp
005EE209 8BEC mov ebp, esp
005EE20B B904000000 mov ecx, $00000004
005EE210 6A00 push $00
005EE212 6A00 push $00
005EE214 49 dec ecx
005EE215 75F9 jnz 005EE210
005EE217 51 push ecx
005EE218 53 push ebx
005EE219 8BD8 mov ebx, eax
005EE21B 33C0 xor eax, eax
005EE21D 55 push ebp
* Possible String Reference to: '镴e?腚[嬪]?
|
005EE21E 6851E35E00 push $005EE351
***** TRY
|
005EE223 64FF30 push dword ptr fs:[eax]
005EE226 648920 mov fs:[eax], esp
005EE229 8D55F8 lea edx, [ebp-$08]
* Reference to control Trjzc_f.ed_name : TAdvEdit
|
005EE22C 8B83F8020000 mov eax, [ebx+$02F8]
* Reference to: AdvEdit.Proc_004F034C
|
005EE232 E81521F0FF call 004F034C
005EE237 8B45F8 mov eax, [ebp-$08]
005EE23A 8D55FC lea edx, [ebp-$04]
* Reference to: Unit_00408FCC.Proc_0040A068
|
005EE23D E826BEE1FF call 0040A068
005EE242 837DFC00 cmp dword ptr [ebp-$04], +$00
005EE246 752B jnz 005EE273
005EE248 6A40 push $40
* Possible String Reference to: '提示'
|
005EE24A B960E35E00 mov ecx, $005EE360
* Possible String Reference to: '请输入用户名称!'
|
005EE24F BA68E35E00 mov edx, $005EE368
* Reference to TApplication instance
|
005EE254 A160309C00 mov eax, dword ptr [$009C3060]
005EE259 8B00 mov eax, [eax]
* Reference to: Forms.TApplication.MessageBox(TApplication;PChar;PChar;Longint):Integer;
|
005EE25B E8C087E8FF call 00476A20
* Reference to control Trjzc_f.ed_name : TAdvEdit
|
005EE260 8B83F8020000 mov eax, [ebx+$02F8]
005EE266 8B10 mov edx, [eax]
* Possible reference to virtual method TAdvEdit.OFFS_00C0
|
005EE268 FF92C0000000 call dword ptr [edx+$00C0]
005EE26E E9C3000000 jmp 005EE336
005EE273 A174529C00 mov eax, dword ptr [$009C5274]
005EE278 50 push eax
005EE279 8D55F4 lea edx, [ebp-$0C]
* Reference to control Trjzc_f.ed_reg : TAdvEdit
|
005EE27C 8B8300030000 mov eax, [ebx+$0300]
* Reference to: AdvEdit.Proc_004F034C
|
005EE282 E8C520F0FF call 004F034C
005EE287 8B45F4 mov eax, [ebp-$0C]
005EE28A 50 push eax
* Reference to: regdll.checksn()
|
005EE28B E84C8E0F00 call 006E70DC
005EE290 84C0 test al, al
005EE292 0F8486000000 jz 005EE31E
005EE298 8D55EC lea edx, [ebp-$14]
* Reference to control Trjzc_f.ed_reg : TAdvEdit
|
005EE29B 8B8300030000 mov eax, [ebx+$0300]
* Reference to: AdvEdit.Proc_004F034C
|
005EE2A1 E8A620F0FF call 004F034C
005EE2A6 8B45EC mov eax, [ebp-$14]
005EE2A9 8D55F0 lea edx, [ebp-$10]
* Reference to: Unit_00408FCC.Proc_0040A068
|
005EE2AC E8B7BDE1FF call 0040A068
005EE2B1 8B45F0 mov eax, [ebp-$10]
005EE2B4 50 push eax
005EE2B5 A174529C00 mov eax, dword ptr [$009C5274]
005EE2BA 50 push eax
* Possible String Reference to: 'djzqb'
|
005EE2BB 6880E35E00 push $005EE380
* Reference to: regdll.WriteRegistry()
|
005EE2C0 E81F8E0F00 call 006E70E4
005EE2C5 8D55E4 lea edx, [ebp-$1C]
* Reference to control Trjzc_f.ed_reg : TAdvEdit
|
005EE2C8 8B8300030000 mov eax, [ebx+$0300]
* Reference to: AdvEdit.Proc_004F034C
|
005EE2CE E87920F0FF call 004F034C
005EE2D3 8B45E4 mov eax, [ebp-$1C]
005EE2D6 8D55E8 lea edx, [ebp-$18]
* Reference to: Unit_00408FCC.Proc_0040A068
|
005EE2D9 E88ABDE1FF call 0040A068
005EE2DE 8B45E8 mov eax, [ebp-$18]
005EE2E1 50 push eax
005EE2E2 8D55DC lea edx, [ebp-$24]
* Reference to control Trjzc_f.ed_name : TAdvEdit
|
005EE2E5 8B83F8020000 mov eax, [ebx+$02F8]
* Reference to: AdvEdit.Proc_004F034C
|
005EE2EB E85C20F0FF call 004F034C
005EE2F0 8B45DC mov eax, [ebp-$24]
005EE2F3 8D55E0 lea edx, [ebp-$20]
* Reference to: Unit_00408FCC.Proc_0040A068
|
005EE2F6 E86DBDE1FF call 0040A068
005EE2FB 8B45E0 mov eax, [ebp-$20]
005EE2FE 5A pop edx
* Reference to: Unit_006E7135.Proc_006EADC0
|
005EE2FF E8BCCA0F00 call 006EADC0
005EE304 6A40 push $40
* Possible String Reference to: '提示'
|
005EE306 B960E35E00 mov ecx, $005EE360
* Possible String Reference to: '注册成功!请退出重新启动软件。'
|
005EE30B BA88E35E00 mov edx, $005EE388
* Reference to TApplication instance
|
005EE310 A160309C00 mov eax, dword ptr [$009C3060]
005EE315 8B00 mov eax, [eax]
* Reference to: Forms.TApplication.MessageBox(TApplication;PChar;PChar;Longint):Integer;
|
005EE317 E80487E8FF call 00476A20
005EE31C EB18 jmp 005EE336
005EE31E 6A40 push $40
* Possible String Reference to: '提示'
|
005EE320 B960E35E00 mov ecx, $005EE360
* Possible String Reference to: '注册失败!'
|
005EE325 BAA8E35E00 mov edx, $005EE3A8
* Reference to TApplication instance
|
005EE32A A160309C00 mov eax, dword ptr [$009C3060]
005EE32F 8B00 mov eax, [eax]
* Reference to: Forms.TApplication.MessageBox(TApplication;PChar;PChar;Longint):Integer;
|
005EE331 E8EA86E8FF call 00476A20
005EE336 33C0 xor eax, eax
005EE338 5A pop edx
005EE339 59 pop ecx
005EE33A 59 pop ecx
005EE33B 648910 mov fs:[eax], edx
****** FINALLY
|
* Possible String Reference to: '[嬪]?
|
005EE33E 6858E35E00 push $005EE358
005EE343 8D45DC lea eax, [ebp-$24]
005EE346 BA09000000 mov edx, $00000009
* Reference to: System.@LStrArrayClr(void;void;Integer);
|
005EE34B E8D06CE1FF call 00405020
005EE350 C3 ret
* Reference to: System.@HandleFinally;
|
005EE351 E94A65E1FF jmp 004048A0
005EE356 EBEB jmp 005EE343
****** END
|
005EE358 5B pop ebx
005EE359 8BE5 mov esp, ebp
005EE35B 5D pop ebp
005EE35C C3 ret
*)
end;
procedure Trjzc_f.FormDeactivate(Sender : TObject);
begin
(*
* Reference to: regdll.trywrite()
|
005EE3B4 E8438D0F00 call 006E70FC
005EE3B9 85C0 test eax, eax
005EE3BB 7D0C jnl 005EE3C9
* Reference to TApplication instance
|
005EE3BD A160309C00 mov eax, dword ptr [$009C3060]
005EE3C2 8B00 mov eax, [eax]
* Reference to: Forms.TApplication.Terminate(TApplication);
|
005EE3C4 E8B385E8FF call 0047697C
005EE3C9 C3 ret
*)
end;
procedure Trjzc_f.FormClose(Sender : TObject);
begin
(*
005EE3CC C60102 mov byte ptr [ecx], $02
005EE3CF C3 ret
*)
end;
procedure Trjzc_f.im_hjClick(Sender : TObject);
begin
(*
005EE3D0 55 push ebp
005EE3D1 8BEC mov ebp, esp
005EE3D3 6A00 push $00
005EE3D5 33C0 xor eax, eax
005EE3D7 55 push ebp
005EE3D8 6856E45E00 push $005EE456
***** TRY
|
005EE3DD 64FF30 push dword ptr fs:[eax]
005EE3E0 648920 mov fs:[eax], esp
* Reference to pointer to GlobalVar_009C757C
|
005EE3E3 A144319C00 mov eax, dword ptr [$009C3144]
005EE3E8 8B00 mov eax, [eax]
005EE3EA BA68E45E00 mov edx, $005EE468
* Reference to: System.@LStrCmp;
|
005EE3EF E80470E1FF call 004053F8
005EE3F4 750F jnz 005EE405
005EE3F6 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://www.pcsoft.com.cn/Order/form_set_order.aspx?CardID=3236 '
|
005EE3F9 BA74E45E00 mov edx, $005EE474
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE3FE E8916CE1FF call 00405094
005EE403 EB20 jmp 005EE425
* Reference to pointer to GlobalVar_009C757C
|
005EE405 A144319C00 mov eax, dword ptr [$009C3144]
005EE40A 8B00 mov eax, [eax]
005EE40C BABCE45E00 mov edx, $005EE4BC
* Reference to: System.@LStrCmp;
|
005EE411 E8E26FE1FF call 004053F8
005EE416 750D jnz 005EE425
005EE418 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://www.pcsoft.com.cn/Order/form_set_order.aspx?CardID=3235'
|
005EE41B BAC8E45E00 mov edx, $005EE4C8
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE420 E86F6CE1FF call 00405094
005EE425 6A05 push $05
005EE427 6A00 push $00
005EE429 6A00 push $00
005EE42B 8B45FC mov eax, [ebp-$04]
* Reference to: System.@LStrToPChar(String):PAnsiChar;
|
005EE42E E87970E1FF call 004054AC
005EE433 50 push eax
* Possible String Reference to: 'open'
|
005EE434 6808E55E00 push $005EE508
005EE439 6A00 push $00
* Reference to: shell32.ShellExecuteA()
|
005EE43B E8BC68E5FF call 00444CFC
005EE440 33C0 xor eax, eax
005EE442 5A pop edx
005EE443 59 pop ecx
005EE444 59 pop ecx
005EE445 648910 mov fs:[eax], edx
****** FINALLY
|
005EE448 685DE45E00 push $005EE45D
005EE44D 8D45FC lea eax, [ebp-$04]
* Reference to: System.@LStrClr(void;void);
|
005EE450 E8A76BE1FF call 00404FFC
005EE455 C3 ret
* Reference to: System.@HandleFinally;
|
005EE456 E94564E1FF jmp 004048A0
005EE45B EBF0 jmp 005EE44D
****** END
|
005EE45D 59 pop ecx
005EE45E 5D pop ebp
005EE45F C3 ret
*)
end;
procedure Trjzc_f.im_tkClick(Sender : TObject);
begin
(*
005EE510 55 push ebp
005EE511 8BEC mov ebp, esp
005EE513 6A00 push $00
005EE515 33C0 xor eax, eax
005EE517 55 push ebp
005EE518 6896E55E00 push $005EE596
***** TRY
|
005EE51D 64FF30 push dword ptr fs:[eax]
005EE520 648920 mov fs:[eax], esp
* Reference to pointer to GlobalVar_009C757C
|
005EE523 A144319C00 mov eax, dword ptr [$009C3144]
005EE528 8B00 mov eax, [eax]
005EE52A BAA8E55E00 mov edx, $005EE5A8
* Reference to: System.@LStrCmp;
|
005EE52F E8C46EE1FF call 004053F8
005EE534 750F jnz 005EE545
005EE536 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://shareware.skycn.com/orderform.php?purtype=unreg&soft_id=6379'
|
005EE539 BAB4E55E00 mov edx, $005EE5B4
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE53E E8516BE1FF call 00405094
005EE543 EB20 jmp 005EE565
* Reference to pointer to GlobalVar_009C757C
|
005EE545 A144319C00 mov eax, dword ptr [$009C3144]
005EE54A 8B00 mov eax, [eax]
005EE54C BA00E65E00 mov edx, $005EE600
* Reference to: System.@LStrCmp;
|
005EE551 E8A26EE1FF call 004053F8
005EE556 750D jnz 005EE565
005EE558 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://shareware.skycn.com/orderform.php?purtype=unreg&soft_id=6380'
|
005EE55B BA0CE65E00 mov edx, $005EE60C
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE560 E82F6BE1FF call 00405094
005EE565 6A05 push $05
005EE567 6A00 push $00
005EE569 6A00 push $00
005EE56B 8B45FC mov eax, [ebp-$04]
* Reference to: System.@LStrToPChar(String):PAnsiChar;
|
005EE56E E8396FE1FF call 004054AC
005EE573 50 push eax
* Possible String Reference to: 'open'
|
005EE574 6850E65E00 push $005EE650
005EE579 6A00 push $00
* Reference to: shell32.ShellExecuteA()
|
005EE57B E87C67E5FF call 00444CFC
005EE580 33C0 xor eax, eax
005EE582 5A pop edx
005EE583 59 pop ecx
005EE584 59 pop ecx
005EE585 648910 mov fs:[eax], edx
****** FINALLY
|
005EE588 689DE55E00 push $005EE59D
005EE58D 8D45FC lea eax, [ebp-$04]
* Reference to: System.@LStrClr(void;void);
|
005EE590 E8676AE1FF call 00404FFC
005EE595 C3 ret
* Reference to: System.@HandleFinally;
|
005EE596 E90563E1FF jmp 004048A0
005EE59B EBF0 jmp 005EE58D
****** END
|
005EE59D 59 pop ecx
005EE59E 5D pop ebp
005EE59F C3 ret
*)
end;
procedure Trjzc_f.lb_hjClick(Sender : TObject);
begin
(*
005EE658 55 push ebp
005EE659 8BEC mov ebp, esp
005EE65B 6A00 push $00
005EE65D 33C0 xor eax, eax
005EE65F 55 push ebp
005EE660 68DEE65E00 push $005EE6DE
***** TRY
|
005EE665 64FF30 push dword ptr fs:[eax]
005EE668 648920 mov fs:[eax], esp
* Reference to pointer to GlobalVar_009C757C
|
005EE66B A144319C00 mov eax, dword ptr [$009C3144]
005EE670 8B00 mov eax, [eax]
005EE672 BAF0E65E00 mov edx, $005EE6F0
* Reference to: System.@LStrCmp;
|
005EE677 E87C6DE1FF call 004053F8
005EE67C 750F jnz 005EE68D
005EE67E 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://www.pcsoft.com.cn/Order/form_set_order.aspx?CardID=3236 '
|
005EE681 BAFCE65E00 mov edx, $005EE6FC
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE686 E8096AE1FF call 00405094
005EE68B EB20 jmp 005EE6AD
* Reference to pointer to GlobalVar_009C757C
|
005EE68D A144319C00 mov eax, dword ptr [$009C3144]
005EE692 8B00 mov eax, [eax]
005EE694 BA44E75E00 mov edx, $005EE744
* Reference to: System.@LStrCmp;
|
005EE699 E85A6DE1FF call 004053F8
005EE69E 750D jnz 005EE6AD
005EE6A0 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://www.pcsoft.com.cn/Order/form_set_order.aspx?CardID=3235'
|
005EE6A3 BA50E75E00 mov edx, $005EE750
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE6A8 E8E769E1FF call 00405094
005EE6AD 6A05 push $05
005EE6AF 6A00 push $00
005EE6B1 6A00 push $00
005EE6B3 8B45FC mov eax, [ebp-$04]
* Reference to: System.@LStrToPChar(String):PAnsiChar;
|
005EE6B6 E8F16DE1FF call 004054AC
005EE6BB 50 push eax
* Possible String Reference to: 'open'
|
005EE6BC 6890E75E00 push $005EE790
005EE6C1 6A00 push $00
* Reference to: shell32.ShellExecuteA()
|
005EE6C3 E83466E5FF call 00444CFC
005EE6C8 33C0 xor eax, eax
005EE6CA 5A pop edx
005EE6CB 59 pop ecx
005EE6CC 59 pop ecx
005EE6CD 648910 mov fs:[eax], edx
****** FINALLY
|
005EE6D0 68E5E65E00 push $005EE6E5
005EE6D5 8D45FC lea eax, [ebp-$04]
* Reference to: System.@LStrClr(void;void);
|
005EE6D8 E81F69E1FF call 00404FFC
005EE6DD C3 ret
* Reference to: System.@HandleFinally;
|
005EE6DE E9BD61E1FF jmp 004048A0
005EE6E3 EBF0 jmp 005EE6D5
****** END
|
005EE6E5 59 pop ecx
005EE6E6 5D pop ebp
005EE6E7 C3 ret
*)
end;
procedure Trjzc_f.lb_tkClick(Sender : TObject);
begin
(*
005EE798 55 push ebp
005EE799 8BEC mov ebp, esp
005EE79B 6A00 push $00
005EE79D 33C0 xor eax, eax
005EE79F 55 push ebp
005EE7A0 681EE85E00 push $005EE81E
***** TRY
|
005EE7A5 64FF30 push dword ptr fs:[eax]
005EE7A8 648920 mov fs:[eax], esp
* Reference to pointer to GlobalVar_009C757C
|
005EE7AB A144319C00 mov eax, dword ptr [$009C3144]
005EE7B0 8B00 mov eax, [eax]
005EE7B2 BA30E85E00 mov edx, $005EE830
* Reference to: System.@LStrCmp;
|
005EE7B7 E83C6CE1FF call 004053F8
005EE7BC 750F jnz 005EE7CD
005EE7BE 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://shareware.skycn.com/orderform.php?purtype=unreg&soft_id=6379'
|
005EE7C1 BA3CE85E00 mov edx, $005EE83C
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE7C6 E8C968E1FF call 00405094
005EE7CB EB20 jmp 005EE7ED
* Reference to pointer to GlobalVar_009C757C
|
005EE7CD A144319C00 mov eax, dword ptr [$009C3144]
005EE7D2 8B00 mov eax, [eax]
005EE7D4 BA88E85E00 mov edx, $005EE888
* Reference to: System.@LStrCmp;
|
005EE7D9 E81A6CE1FF call 004053F8
005EE7DE 750D jnz 005EE7ED
005EE7E0 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://shareware.skycn.com/orderform.php?purtype=unreg&soft_id=6380'
|
005EE7E3 BA94E85E00 mov edx, $005EE894
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE7E8 E8A768E1FF call 00405094
005EE7ED 6A05 push $05
005EE7EF 6A00 push $00
005EE7F1 6A00 push $00
005EE7F3 8B45FC mov eax, [ebp-$04]
* Reference to: System.@LStrToPChar(String):PAnsiChar;
|
005EE7F6 E8B16CE1FF call 004054AC
005EE7FB 50 push eax
* Possible String Reference to: 'open'
|
005EE7FC 68D8E85E00 push $005EE8D8
005EE801 6A00 push $00
* Reference to: shell32.ShellExecuteA()
|
005EE803 E8F464E5FF call 00444CFC
005EE808 33C0 xor eax, eax
005EE80A 5A pop edx
005EE80B 59 pop ecx
005EE80C 59 pop ecx
005EE80D 648910 mov fs:[eax], edx
****** FINALLY
|
005EE810 6825E85E00 push $005EE825
005EE815 8D45FC lea eax, [ebp-$04]
* Reference to: System.@LStrClr(void;void);
|
005EE818 E8DF67E1FF call 00404FFC
005EE81D C3 ret
* Reference to: System.@HandleFinally;
|
005EE81E E97D60E1FF jmp 004048A0
005EE823 EBF0 jmp 005EE815
****** END
|
005EE825 59 pop ecx
005EE826 5D pop ebp
005EE827 C3 ret
*)
end;
procedure Trjzc_f.im_hhClick(Sender : TObject);
begin
(*
005EE8E0 55 push ebp
005EE8E1 8BEC mov ebp, esp
005EE8E3 6A00 push $00
005EE8E5 33C0 xor eax, eax
005EE8E7 55 push ebp
* Possible String Reference to: '閖_?腽Y]?
|
005EE8E8 6831E95E00 push $005EE931
***** TRY
|
005EE8ED 64FF30 push dword ptr fs:[eax]
005EE8F0 648920 mov fs:[eax], esp
005EE8F3 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://www.softputian.com'
|
005EE8F6 BA44E95E00 mov edx, $005EE944
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE8FB E89467E1FF call 00405094
005EE900 6A05 push $05
005EE902 6A00 push $00
005EE904 6A00 push $00
005EE906 8B45FC mov eax, [ebp-$04]
* Reference to: System.@LStrToPChar(String):PAnsiChar;
|
005EE909 E89E6BE1FF call 004054AC
005EE90E 50 push eax
* Possible String Reference to: 'open'
|
005EE90F 6860E95E00 push $005EE960
005EE914 6A00 push $00
* Reference to: shell32.ShellExecuteA()
|
005EE916 E8E163E5FF call 00444CFC
005EE91B 33C0 xor eax, eax
005EE91D 5A pop edx
005EE91E 59 pop ecx
005EE91F 59 pop ecx
005EE920 648910 mov fs:[eax], edx
****** FINALLY
|
* Possible String Reference to: 'Y]?
|
005EE923 6838E95E00 push $005EE938
005EE928 8D45FC lea eax, [ebp-$04]
* Reference to: System.@LStrClr(void;void);
|
005EE92B E8CC66E1FF call 00404FFC
005EE930 C3 ret
* Reference to: System.@HandleFinally;
|
005EE931 E96A5FE1FF jmp 004048A0
005EE936 EBF0 jmp 005EE928
****** END
|
005EE938 59 pop ecx
005EE939 5D pop ebp
005EE93A C3 ret
*)
end;
procedure Trjzc_f.ed_nameKeyPress(Sender : TObject);
begin
(*
005EE968 8A01 mov al, byte ptr [ecx]
005EE96A 2C27 sub al, $27
005EE96C 7503 jnz 005EE971
005EE96E C60100 mov byte ptr [ecx], $00
005EE971 C3 ret
*)
end;
procedure Trjzc_f.im_rxClick(Sender : TObject);
begin
(*
005EE974 55 push ebp
005EE975 8BEC mov ebp, esp
005EE977 6A00 push $00
005EE979 33C0 xor eax, eax
005EE97B 55 push ebp
005EE97C 68FAE95E00 push $005EE9FA
***** TRY
|
005EE981 64FF30 push dword ptr fs:[eax]
005EE984 648920 mov fs:[eax], esp
* Reference to pointer to GlobalVar_009C757C
|
005EE987 A144319C00 mov eax, dword ptr [$009C3144]
005EE98C 8B00 mov eax, [eax]
005EE98E BA0CEA5E00 mov edx, $005EEA0C
* Reference to: System.@LStrCmp;
|
005EE993 E8606AE1FF call 004053F8
005EE998 750F jnz 005EE9A9
005EE99A 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://www.sharebank.com.cn/soft/softbuy.php?soid=16085'
|
005EE99D BA18EA5E00 mov edx, $005EEA18
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE9A2 E8ED66E1FF call 00405094
005EE9A7 EB20 jmp 005EE9C9
* Reference to pointer to GlobalVar_009C757C
|
005EE9A9 A144319C00 mov eax, dword ptr [$009C3144]
005EE9AE 8B00 mov eax, [eax]
005EE9B0 BA58EA5E00 mov edx, $005EEA58
* Reference to: System.@LStrCmp;
|
005EE9B5 E83E6AE1FF call 004053F8
005EE9BA 750D jnz 005EE9C9
005EE9BC 8D45FC lea eax, [ebp-$04]
* Possible String Reference to: 'http://www.sharebank.com.cn/soft/softbuy.php?soid=16364'
|
005EE9BF BA64EA5E00 mov edx, $005EEA64
* Reference to: System.@LStrLAsg(void;void;void;void);
|
005EE9C4 E8CB66E1FF call 00405094
005EE9C9 6A05 push $05
005EE9CB 6A00 push $00
005EE9CD 6A00 push $00
005EE9CF 8B45FC mov eax, [ebp-$04]
* Reference to: System.@LStrToPChar(String):PAnsiChar;
|
005EE9D2 E8D56AE1FF call 004054AC
005EE9D7 50 push eax
* Possible String Reference to: 'open'
|
005EE9D8 689CEA5E00 push $005EEA9C
005EE9DD 6A00 push $00
* Reference to: shell32.ShellExecuteA()
|
005EE9DF E81863E5FF call 00444CFC
005EE9E4 33C0 xor eax, eax
005EE9E6 5A pop edx
005EE9E7 59 pop ecx
005EE9E8 59 pop ecx
005EE9E9 648910 mov fs:[eax], edx
****** FINALLY
|
005EE9EC 6801EA5E00 push $005EEA01
005EE9F1 8D45FC lea eax, [ebp-$04]
* Reference to: System.@LStrClr(void;void);
|
005EE9F4 E80366E1FF call 00404FFC
005EE9F9 C3 ret
* Reference to: System.@HandleFinally;
|
005EE9FA E9A15EE1FF jmp 004048A0
005EE9FF EBF0 jmp 005EE9F1
****** END
|
005EEA01 59 pop ecx
005EEA02 5D pop ebp
005EEA03 C3 ret
*)
end ;
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课