00453798 /. 55 push ebp
00453799 |. 8BEC mov ebp, esp
0045379B |. 6A 00 push 0
0045379D |. 6A 00 push 0
0045379F |. 53 push ebx
004537A0 |. 8BD8 mov ebx, eax
004537A2 |. 33C0 xor eax, eax
004537A4 |. 55 push ebp
004537A5 |. 68 03384500 push 00453803
004537AA |. 64:FF30 push dword ptr fs:[eax]
004537AD |. 64:8920 mov dword ptr fs:[eax], esp
004537B0 |. 8B83 F8020000 mov eax, dword ptr [ebx+2F8] ; 这里EBX+2F8 恒等于00D53888，不知道是个什么东西
004537B6 |. E8 6D5AFEFF call 00439228 ; 这个CALL也不知道是干什么的，F7跟进一下子就跟丢了
004537BB |. 33D2 xor edx, edx
004537BD |. 52 push edx ; /Arg2 => 00000000
004537BE |. 50 push eax ; |Arg1
004537BF |. 8D45 FC lea eax, dword ptr [ebp-4] ; |
004537C2 |. E8 0546FBFF call 00407DCC ; \check1.00407DCC
004537C7 |. 8B45 FC mov eax, dword ptr [ebp-4]
004537CA |. E8 9D3BFDFF call 0042736C ; 这个是调用SHOWMESSAGE来显示字符串
004537CF |. 8D55 F8 lea edx, dword ptr [ebp-8]
004537D2 |. 8B83 F8020000 mov eax, dword ptr [ebx+2F8]
004537D8 |. E8 6FF2FDFF call 00432A4C
004537DD |. 8B45 F8 mov eax, dword ptr [ebp-8] ; dword ptr [ebp-8]==edit1.text
004537E0 |. E8 873BFDFF call 0042736C ; 这个是调用SHOWMESSAGE来显示字符串
004537E5 |. 33C0 xor eax, eax
004537E7 |. 5A pop edx
004537E8 |. 59 pop ecx
004537E9 |. 59 pop ecx
004537EA |. 64:8910 mov dword ptr fs:[eax], edx
004537ED |. 68 0A384500 push 0045380A
004537F2 |> 8D45 F8 lea eax, dword ptr [ebp-8]
004537F5 |. E8 5206FBFF call 00403E4C
004537FA |. 8D45 FC lea eax, dword ptr [ebp-4]
004537FD |. E8 4A06FBFF call 00403E4C
00453802 \. C3 retn
原程序是用DELPHI写的，代码如下，现在不能对号入座：
procedure TForm1.FormCreate(Sender: TObject);
var
shandle:string;
begin
shandle:=inttostr(edit1.Handle);
showmessage(shandle);
showmessage(edit1.text);
end;
仅仅这几行代码而已
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
