dede tsel.txt

7/17/2019 dede tsel.txt

1/20

005BDED8 55 push ebp005BDED9 8BEC mov ebp, esp005BDEDB 33C9 xor ecx, ecx005BDEDD 51 push ecx005BDEDE 51 push ecx005BDEDF 51 push ecx005BDEE0 51 push ecx005BDEE1 51 push ecx005BDEE2 53 push ebx005BDEE3 56 push esi005BDEE4 8BDA mov ebx, edx005BDEE6 8BF0 mov esi, eax005BDEE8 33C0 xor eax, eax005BDEEA 55 push ebp

* Possible String Reference to: 'X^[]'|005BDEEB 68BDE35B00 push $005BE3BD

***** TRY|005BDEF0 64FF30 push dword ptr fs:[eax]005BDEF3 648920 mov fs:[eax], esp005BDEF6 8BC6 mov eax, esi

* Reference to : TForm1.LedBlinkUpload()|005BDEF8 E8A7FAFFFF call 005BD9A4005BDEFD 8B4378 mov eax, [ebx+$78]

* Reference to: System.@LStrLen(String):Integer;|005BDF00 E8F366E4FF call 004045F8005BDF05 01055C995C00 add [$005C995C], eax

* Reference to control TForm1.rb1 : TRadioButton|

005BDF0B 8B8688030000 mov eax, [esi+$0388]005BDF11 8B10 mov edx, [eax]

* Reference to method TRadioButton.GetChecked()|005BDF13 FF92C8000000 call dword ptr [edx+$00C8]005BDF19 3C01 cmp al, $01005BDF1B 0F8597000000 jnz 005BDFB8005BDF21 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'CONNECT'|005BDF24 B8D4E35B00 mov eax, $005BE3D4

* Reference to: System.@LStrPos;|005BDF29 E80E6AE4FF call 0040493C005BDF2E 85C0 test eax, eax005BDF30 7522 jnz 005BDF54005BDF32 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HEAD'|


2/20

005BDF35 B8E4E35B00 mov eax, $005BE3E4

* Reference to: System.@LStrPos;|005BDF3A E8FD69E4FF call 0040493C005BDF3F 85C0 test eax, eax005BDF41 7511 jnz 005BDF54005BDF43 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'POST'|005BDF46 B8F4E35B00 mov eax, $005BE3F4

* Reference to: System.@LStrPos;|005BDF4B E8EC69E4FF call 0040493C005BDF50 85C0 test eax, eax005BDF52 7464 jz 005BDFB8005BDF54 8D4DFC lea ecx, [ebp-$04]

* Possible String Reference to: 'Refresh: 10; url=http://my.telkomse| l.com/'|005BDF57 BA04E45B00 mov edx, $005BE404

005BDF5C 8B4378 mov eax, [ebx+$78]|005BDF5F E874FBFFFF call 005BDAD8005BDF64 8D45F8 lea eax, [ebp-$08]

* Possible String Reference to: 'CONNECT my.telkomsel.com:80 HTTP/1.| 0Host: my.telkomsel.comProxy-Connec| tion: keep-aliveConnection: keep-al| ive'|005BDF67 BA38E45B00 mov edx, $005BE438

* Reference to: System.@LStrLAsg(void;void;void;void);|005BDF6C E85F64E4FF call 004043D0005BDF71 8D45F0 lea eax, [ebp-$10]

* Possible String Reference to: 'GET http://my.telkomsel.com:80/ HTT| P/1.1'|005BDF74 BAB8E45B00 mov edx, $005BE4B8

* Reference to: System.@LStrLAsg(void;void;void;void);|005BDF79 E85264E4FF call 004043D0

005BDF7E 8B55FC mov edx, [ebp-$04]005BDF81 8B4370 mov eax, [ebx+$70]005BDF84 8B08 mov ecx, [eax]005BDF86 FF5178 call dword ptr [ecx+$78]005BDF89 68E8030000 push $000003E8

* Reference to: kernel32.Sleep()|005BDF8E E86100E5FF call 0040DFF4005BDF93 8D45F0 lea eax, [ebp-$10]


3/20

005BDF96 8B5378 mov edx, [ebx+$78]

* Reference to: System.@LStrCat;|005BDF99 E86266E4FF call 00404600005BDF9E 8B55F0 mov edx, [ebp-$10]005BDFA1 8B4370 mov eax, [ebx+$70]005BDFA4 8B08 mov ecx, [eax]005BDFA6 FF5178 call dword ptr [ecx+$78]005BDFA9 6A64 push $64

* Reference to: kernel32.Sleep()|005BDFAB E84400E5FF call 0040DFF4005BDFB0 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrClr(void;void);|005BDFB3 E88063E4FF call 00404338

* Reference to control TForm1.rb2 : TRadioButton|005BDFB8 8B868C030000 mov eax, [esi+$038C]005BDFBE 8B10 mov edx, [eax]

* Reference to method TRadioButton.GetChecked()|005BDFC0 FF92C8000000 call dword ptr [edx+$00C8]005BDFC6 3C01 cmp al, $01005BDFC8 0F8597000000 jnz 005BE065005BDFCE 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'CONNECT'|005BDFD1 B8D4E35B00 mov eax, $005BE3D4

* Reference to: System.@LStrPos;

|005BDFD6 E86169E4FF call 0040493C005BDFDB 85C0 test eax, eax005BDFDD 7522 jnz 005BE001005BDFDF 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HEAD'|005BDFE2 B8E4E35B00 mov eax, $005BE3E4

* Reference to: System.@LStrPos;|005BDFE7 E85069E4FF call 0040493C

005BDFEC 85C0 test eax, eax005BDFEE 7511 jnz 005BE001005BDFF0 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'POST'|005BDFF3 B8F4E35B00 mov eax, $005BE3F4

* Reference to: System.@LStrPos;|


4/20

005BDFF8 E83F69E4FF call 0040493C005BDFFD 85C0 test eax, eax005BDFFF 7464 jz 005BE065005BE001 8D4DFC lea ecx, [ebp-$04]

* Possible String Reference to: 'Refresh: 10; url=http://opx-test.op| era.com/'|005BE004 BAF0E45B00 mov edx, $005BE4F0005BE009 8B4378 mov eax, [ebx+$78]

|005BE00C E8C7FAFFFF call 005BDAD8005BE011 8D45F8 lea eax, [ebp-$08]

* Possible String Reference to: 'CONNECT opx-test.opera.com:80 HTTP/| 1.0Host: opx-test.opera.comProxy-Co| nnection: keep-aliveConnection: kee| p-alive'|005BE014 BA28E55B00 mov edx, $005BE528

* Reference to: System.@LStrLAsg(void;void;void;void);|

005BE019 E8B263E4FF call 004043D0005BE01E 8D45F0 lea eax, [ebp-$10]

* Possible String Reference to: 'GET http://opx-test.opera.com:80/ H| TTP/1.1'|005BE021 BAACE55B00 mov edx, $005BE5AC

* Reference to: System.@LStrLAsg(void;void;void;void);|005BE026 E8A563E4FF call 004043D0005BE02B 8B55FC mov edx, [ebp-$04]005BE02E 8B4370 mov eax, [ebx+$70]

005BE031 8B08 mov ecx, [eax]005BE033 FF5178 call dword ptr [ecx+$78]005BE036 68E8030000 push $000003E8

* Reference to: kernel32.Sleep()|005BE03B E8B4FFE4FF call 0040DFF4005BE040 8D45F0 lea eax, [ebp-$10]005BE043 8B5378 mov edx, [ebx+$78]

* Reference to: System.@LStrCat;|005BE046 E8B565E4FF call 00404600

005BE04B 8B55F0 mov edx, [ebp-$10]005BE04E 8B4370 mov eax, [ebx+$70]005BE051 8B08 mov ecx, [eax]005BE053 FF5178 call dword ptr [ecx+$78]005BE056 6A64 push $64

* Reference to: kernel32.Sleep()|005BE058 E897FFE4FF call 0040DFF4005BE05D 8D4378 lea eax, [ebx+$78]


5/20

* Reference to: System.@LStrClr(void;void);|005BE060 E8D362E4FF call 00404338

* Reference to control TForm1.rb3 : TRadioButton|005BE065 8B8690030000 mov eax, [esi+$0390]005BE06B 8B10 mov edx, [eax]

* Reference to method TRadioButton.GetChecked()|005BE06D FF92C8000000 call dword ptr [edx+$00C8]005BE073 3C01 cmp al, $01005BE075 7553 jnz 005BE0CA

* Reference to class Connection|005BE077 A0E0E55B00 mov al, byte ptr [$005BE5E0]005BE07C 50 push eax005BE07D 8D45EC lea eax, [ebp-$14]005BE080 50 push eax

* Possible String Reference to: ' + #13#10 + #13#10 200 ok'

|005BE081 B9ECE55B00 mov ecx, $005BE5EC

* Possible String Reference to: ' #13#10 + #13#10, #13#10 + '|005BE086 BA10E65B00 mov edx, $005BE610005BE08B 8B45FC mov eax, [ebp-$04]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BE08E E82DFEE4FF call 0040DEC0005BE093 8B55EC mov edx, [ebp-$14]

005BE096 8D45FC lea eax, [ebp-$04]

* Reference to: System.@LStrLAsg(void;void;void;void);|005BE099 E83263E4FF call 004043D0005BE09E 8D45F8 lea eax, [ebp-$08]005BE0A1 8B4B78 mov ecx, [ebx+$78]

* Possible String Reference to: 'GET http://my.telkomsel.com/ HTTP/1| .1 SSH-2.0-1.91 sshlib: Bitvise SSH| Client (Tunnelier) 4.60User-Agent:| Mozilla/5.0 (Windows NT6.1; rv:14.| 0) Gecko/20100101 Firefox/14.0Conne

| ction: Keep-Alive Host : my.telkoms| el.com'|005BE0A4 BA34E65B00 mov edx, $005BE634

* Reference to: System.@LStrCat3;|005BE0A9 E89665E4FF call 00404644005BE0AE 8B5378 mov edx, [ebx+$78]


6/20

* Possible String Reference to: 'HTTP'|005BE0B1 B820E75B00 mov eax, $005BE720

* Reference to: System.@LStrPos;|005BE0B6 E88168E4FF call 0040493C005BE0BB 85C0 test eax, eax005BE0BD 740B jz 005BE0CA005BE0BF 8D4378 lea eax, [ebx+$78]005BE0C2 8B55F8 mov edx, [ebp-$08]

* Reference to: System.@LStrCat;|005BE0C5 E83665E4FF call 00404600

* Reference to control TForm1.rb4 : TRadioButton|005BE0CA 8B8694030000 mov eax, [esi+$0394]005BE0D0 8B10 mov edx, [eax]

* Reference to method TRadioButton.GetChecked()|005BE0D2 FF92C8000000 call dword ptr [edx+$00C8]

005BE0D8 3C01 cmp al, $01005BE0DA 0F85C2020000 jnz 005BE3A2005BE0E0 8D45F4 lea eax, [ebp-$0C]005BE0E3 8B5378 mov edx, [ebx+$78]

* Reference to: System.@LStrLAsg(void;void;void;void);|005BE0E6 E8E562E4FF call 004043D0005BE0EB 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'CONNECT'|005BE0EE B8D4E35B00 mov eax, $005BE3D4

* Reference to: System.@LStrPos;|005BE0F3 E84468E4FF call 0040493C005BE0F8 85C0 test eax, eax005BE0FA 0F8484000000 jz 005BE184005BE100 8D4DFC lea ecx, [ebp-$04]

* Possible String Reference to: 'Content-Length: 6403 + Content-Type| : text/html'|005BE103 BA30E75B00 mov edx, $005BE730005BE108 8B4378 mov eax, [ebx+$78]

|005BE10B E8C8F9FFFF call 005BDAD8

* Possible String Reference to: 'GET http://my.telkomsel.com/ HTTP/1| .1Host: my.telkomsel.com:80'|005BE110 686CE75B00 push $005BE76C005BE115 FF75F4 push dword ptr [ebp-$0C]005BE118 68BCE75B00 push $005BE7BC


7/20

005BE11D 8D45F4 lea eax, [ebp-$0C]005BE120 BA03000000 mov edx, $00000003

* Reference to: System.@LStrCatN;|005BE125 E88E65E4FF call 004046B8005BE12A 8B55F4 mov edx, [ebp-$0C]005BE12D 8B4370 mov eax, [ebx+$70]005BE130 8B08 mov ecx, [eax]005BE132 FF5178 call dword ptr [ecx+$78]005BE135 8B55F4 mov edx, [ebp-$0C]005BE138 8B4370 mov eax, [ebx+$70]005BE13B 8B08 mov ecx, [eax]005BE13D FF5178 call dword ptr [ecx+$78]005BE140 8B55F4 mov edx, [ebp-$0C]005BE143 8B4370 mov eax, [ebx+$70]005BE146 8B08 mov ecx, [eax]005BE148 FF5178 call dword ptr [ecx+$78]005BE14B 8B55F4 mov edx, [ebp-$0C]005BE14E 8B4370 mov eax, [ebx+$70]005BE151 8B08 mov ecx, [eax]005BE153 FF5178 call dword ptr [ecx+$78]005BE156 8B55F4 mov edx, [ebp-$0C]005BE159 8B4370 mov eax, [ebx+$70]

005BE15C 8B08 mov ecx, [eax]005BE15E FF5178 call dword ptr [ecx+$78]005BE161 8B5378 mov edx, [ebx+$78]005BE164 8B4370 mov eax, [ebx+$70]005BE167 8B08 mov ecx, [eax]005BE169 FF5178 call dword ptr [ecx+$78]005BE16C 68F4010000 push $000001F4

* Reference to: kernel32.Sleep()|005BE171 E87EFEE4FF call 0040DFF4005BE176 8D4378 lea eax, [ebx+$78]005BE179 8B4DFC mov ecx, [ebp-$04]

005BE17C 8B55F4 mov edx, [ebp-$0C]

* Reference to: System.@LStrCat3;|005BE17F E8C064E4FF call 00404644

* Reference to control TForm1.rb5 : TRadioButton|005BE184 8B8698030000 mov eax, [esi+$0398]005BE18A 8B10 mov edx, [eax]

* Reference to method TRadioButton.GetChecked()|

005BE18C FF92C8000000 call dword ptr [edx+$00C8]005BE192 3C01 cmp al, $01005BE194 0F8508020000 jnz 005BE3A2005BE19A 8D45F4 lea eax, [ebp-$0C]005BE19D 8B5378 mov edx, [ebx+$78]

* Reference to: System.@LStrLAsg(void;void;void;void);|005BE1A0 E82B62E4FF call 004043D0005BE1A5 8B5378 mov edx, [ebx+$78]


8/20

* Possible String Reference to: 'CONNECT'|005BE1A8 B8D4E35B00 mov eax, $005BE3D4

* Reference to: System.@LStrPos;|005BE1AD E88A67E4FF call 0040493C005BE1B2 85C0 test eax, eax005BE1B4 0F8484000000 jz 005BE23E005BE1BA 8D4DFC lea ecx, [ebp-$04]

* Possible String Reference to: 'Content-Length: 6403 + Content-Type| : text/html'|005BE1BD BA30E75B00 mov edx, $005BE730005BE1C2 8B4378 mov eax, [ebx+$78]

|005BE1C5 E80EF9FFFF call 005BDAD8

* Possible String Reference to: 'GET http://opx-test.opera.com/ HTTP| /1.1Host: opx-test.opera.com:80'|

005BE1CA 68C8E75B00 push $005BE7C8005BE1CF FF75F4 push dword ptr [ebp-$0C]005BE1D2 68BCE75B00 push $005BE7BC005BE1D7 8D45F4 lea eax, [ebp-$0C]005BE1DA BA03000000 mov edx, $00000003

* Reference to: System.@LStrCatN;|005BE1DF E8D464E4FF call 004046B8005BE1E4 8B55F4 mov edx, [ebp-$0C]005BE1E7 8B4370 mov eax, [ebx+$70]005BE1EA 8B08 mov ecx, [eax]005BE1EC FF5178 call dword ptr [ecx+$78]

005BE1EF 8B55F4 mov edx, [ebp-$0C]005BE1F2 8B4370 mov eax, [ebx+$70]005BE1F5 8B08 mov ecx, [eax]005BE1F7 FF5178 call dword ptr [ecx+$78]005BE1FA 8B55F4 mov edx, [ebp-$0C]005BE1FD 8B4370 mov eax, [ebx+$70]005BE200 8B08 mov ecx, [eax]005BE202 FF5178 call dword ptr [ecx+$78]005BE205 8B55F4 mov edx, [ebp-$0C]005BE208 8B4370 mov eax, [ebx+$70]005BE20B 8B08 mov ecx, [eax]005BE20D FF5178 call dword ptr [ecx+$78]005BE210 8B55F4 mov edx, [ebp-$0C]

005BE213 8B4370 mov eax, [ebx+$70]005BE216 8B08 mov ecx, [eax]005BE218 FF5178 call dword ptr [ecx+$78]005BE21B 8B5378 mov edx, [ebx+$78]005BE21E 8B4370 mov eax, [ebx+$70]005BE221 8B08 mov ecx, [eax]005BE223 FF5178 call dword ptr [ecx+$78]005BE226 68F4010000 push $000001F4

* Reference to: kernel32.Sleep()


9/20

|005BE22B E8C4FDE4FF call 0040DFF4005BE230 8D4378 lea eax, [ebx+$78]005BE233 8B4DFC mov ecx, [ebp-$04]005BE236 8B55F4 mov edx, [ebp-$0C]

* Reference to: System.@LStrCat3;|005BE239 E80664E4FF call 00404644

* Reference to control TForm1.rb6 : TRadioButton|005BE23E 8B869C030000 mov eax, [esi+$039C]005BE244 8B10 mov edx, [eax]

* Reference to method TRadioButton.GetChecked()|005BE246 FF92C8000000 call dword ptr [edx+$00C8]005BE24C 3C01 cmp al, $01005BE24E 0F854E010000 jnz 005BE3A2005BE254 8D45F4 lea eax, [ebp-$0C]005BE257 8B5378 mov edx, [ebx+$78]

* Reference to: System.@LStrLAsg(void;void;void;void);

|005BE25A E87161E4FF call 004043D0005BE25F 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HTTP'|005BE262 B820E75B00 mov eax, $005BE720

* Reference to: System.@LStrPos;|005BE267 E8D066E4FF call 0040493C005BE26C 85C0 test eax, eax005BE26E 747A jz 005BE2EA

005BE270 8D4DFC lea ecx, [ebp-$04]

* Possible String Reference to: 'Content-Length: 6403 + Content-Type| : text/html'|005BE273 BA30E75B00 mov edx, $005BE730005BE278 8B4378 mov eax, [ebx+$78]

|005BE27B E858F8FFFF call 005BDAD8

* Possible String Reference to: 'GET http://my.telkomsel.com/ HTTP/1| .1Host: my.telkomsel.com:80'

|005BE280 686CE75B00 push $005BE76C005BE285 FF75F4 push dword ptr [ebp-$0C]005BE288 68BCE75B00 push $005BE7BC005BE28D 8D45F4 lea eax, [ebp-$0C]005BE290 BA03000000 mov edx, $00000003

* Reference to: System.@LStrCatN;|005BE295 E81E64E4FF call 004046B8


10/20

005BE29A 8B55F4 mov edx, [ebp-$0C]005BE29D 8B4370 mov eax, [ebx+$70]005BE2A0 8B08 mov ecx, [eax]005BE2A2 FF5178 call dword ptr [ecx+$78]005BE2A5 8B55F4 mov edx, [ebp-$0C]005BE2A8 8B4370 mov eax, [ebx+$70]005BE2AB 8B08 mov ecx, [eax]005BE2AD FF5178 call dword ptr [ecx+$78]005BE2B0 8B55F4 mov edx, [ebp-$0C]005BE2B3 8B4370 mov eax, [ebx+$70]005BE2B6 8B08 mov ecx, [eax]005BE2B8 FF5178 call dword ptr [ecx+$78]005BE2BB 8B55F4 mov edx, [ebp-$0C]005BE2BE 8B4370 mov eax, [ebx+$70]005BE2C1 8B08 mov ecx, [eax]005BE2C3 FF5178 call dword ptr [ecx+$78]005BE2C6 8B55F4 mov edx, [ebp-$0C]005BE2C9 8B4370 mov eax, [ebx+$70]005BE2CC 8B08 mov ecx, [eax]005BE2CE FF5178 call dword ptr [ecx+$78]005BE2D1 8B5378 mov edx, [ebx+$78]005BE2D4 8B4370 mov eax, [ebx+$70]005BE2D7 8B08 mov ecx, [eax]005BE2D9 FF5178 call dword ptr [ecx+$78]

005BE2DC 8D4378 lea eax, [ebx+$78]005BE2DF 8B4DFC mov ecx, [ebp-$04]005BE2E2 8B55F4 mov edx, [ebp-$0C]

* Reference to: System.@LStrCat3;|005BE2E5 E85A63E4FF call 00404644

* Reference to control TForm1.rb7 : TRadioButton|005BE2EA 8B86A0030000 mov eax, [esi+$03A0]005BE2F0 8B10 mov edx, [eax]

* Reference to method TRadioButton.GetChecked()|005BE2F2 FF92C8000000 call dword ptr [edx+$00C8]005BE2F8 3C01 cmp al, $01005BE2FA 0F85A2000000 jnz 005BE3A2005BE300 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'CONNECT'|005BE303 B8D4E35B00 mov eax, $005BE3D4


005BE308 E82F66E4FF call 0040493C005BE30D 85C0 test eax, eax005BE30F 7533 jnz 005BE344005BE311 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HTTP'|005BE314 B820E75B00 mov eax, $005BE720

* Reference to: System.@LStrPos;


11/20

|005BE319 E81E66E4FF call 0040493C005BE31E 85C0 test eax, eax005BE320 7522 jnz 005BE344005BE322 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'http'|005BE325 B81CE85B00 mov eax, $005BE81C

* Reference to: System.@LStrPos;|005BE32A E80D66E4FF call 0040493C005BE32F 85C0 test eax, eax005BE331 7511 jnz 005BE344005BE333 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'https'|005BE336 B82CE85B00 mov eax, $005BE82C

* Reference to: System.@LStrPos;|005BE33B E8FC65E4FF call 0040493C

005BE340 85C0 test eax, eax005BE342 740D jz 005BE351005BE344 8D4378 lea eax, [ebx+$78]

* Possible String Reference to: 'GETS http://klip.telkomsel.com/ HTT| P/1.1Host: klip.telkomsel.com'|005BE347 BA3CE85B00 mov edx, $005BE83C

* Reference to: System.@LStrCat;|005BE34C E8AF62E4FF call 00404600005BE351 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'CONNECT'|005BE354 B8D4E35B00 mov eax, $005BE3D4

* Reference to: System.@LStrPos;|005BE359 E8DE65E4FF call 0040493C005BE35E 85C0 test eax, eax005BE360 7533 jnz 005BE395005BE362 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HTTP'

|005BE365 B820E75B00 mov eax, $005BE720

* Reference to: System.@LStrPos;|005BE36A E8CD65E4FF call 0040493C005BE36F 85C0 test eax, eax005BE371 7522 jnz 005BE395005BE373 8B5378 mov edx, [ebx+$78]


12/20

* Possible String Reference to: 'http'|005BE376 B81CE85B00 mov eax, $005BE81C

* Reference to: System.@LStrPos;|005BE37B E8BC65E4FF call 0040493C005BE380 85C0 test eax, eax005BE382 7511 jnz 005BE395005BE384 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'https'|005BE387 B82CE85B00 mov eax, $005BE82C

* Reference to: System.@LStrPos;|005BE38C E8AB65E4FF call 0040493C005BE391 85C0 test eax, eax005BE393 740D jz 005BE3A2005BE395 8D4378 lea eax, [ebx+$78]

* Possible String Reference to: 'GET http://my.telkomsel.com/ HTTP/1| .1Host: my.telkomsel.com'

|005BE398 BA8CE85B00 mov edx, $005BE88C

* Reference to: System.@LStrCat;|005BE39D E85E62E4FF call 00404600005BE3A2 33C0 xor eax, eax005BE3A4 5A pop edx005BE3A5 59 pop ecx005BE3A6 59 pop ecx005BE3A7 648910 mov fs:[eax], edx

****** FINALLY

|

* Possible String Reference to: '^[]'|005BE3AA 68C4E35B00 push $005BE3C4005BE3AF 8D45EC lea eax, [ebp-$14]005BE3B2 BA05000000 mov edx, $00000005

* Reference to: System.@LStrArrayClr(void;void;Integer);|005BE3B7 E8A05FE4FF call 0040435C005BE3BC C3 ret

* Reference to: System.@HandleFinally;|005BE3BD E9D658E4FF jmp 00403C98005BE3C2 EBEB jmp 005BE3AF

****** END|005BE3C4 5E pop esi005BE3C5 5B pop ebx


13/20

005BE3C6 8BE5 mov esp, ebp005BE3C8 5D pop ebp005BE3C9 C3 ret

005BE8D0 55 push ebp005BE8D1 8BEC mov ebp, esp005BE8D3 B905000000 mov ecx, $00000005005BE8D8 6A00 push $00005BE8DA 6A00 push $00005BE8DC 49 dec ecx005BE8DD 75F9 jnz 005BE8D8

005BE8DF 53 push ebx005BE8E0 8BDA mov ebx, edx005BE8E2 33D2 xor edx, edx005BE8E4 55 push ebp005BE8E5 68B0EB5B00 push $005BEBB0

***** TRY|005BE8EA 64FF32 push dword ptr fs:[edx]005BE8ED 648922 mov fs:[edx], esp

* Reference to : TForm1.LedBlinkDownload()|

005BE8F0 E857F0FFFF call 005BD94C005BE8F5 8B4378 mov eax, [ebx+$78]

* Reference to: System.@LStrLen(String):Integer;|005BE8F8 E8FB5CE4FF call 004045F8005BE8FD 010558995C00 add [$005C9958], eax005BE903 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: ' 400 Bad Request'|005BE906 B8C4EB5B00 mov eax, $005BEBC4

* Reference to: System.@LStrPos;|005BE90B E82C60E4FF call 0040493C005BE910 85C0 test eax, eax005BE912 7427 jz 005BE93B005BE914 A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BE919 50 push eax005BE91A 8D45FC lea eax, [ebp-$04]005BE91D 50 push eax


14/20

* Possible String Reference to: ' 200 OK'|005BE91E B9E4EB5B00 mov ecx, $005BEBE4

* Possible String Reference to: ' 400 Bad Request'|005BE923 BAC4EB5B00 mov edx, $005BEBC4005BE928 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BE92B E890F5E4FF call 0040DEC0005BE930 8B55FC mov edx, [ebp-$04]005BE933 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);|005BE936 E8515AE4FF call 0040438C005BE93B 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: ' 403 forbidden'|005BE93E B8F4EB5B00 mov eax, $005BEBF4

* Reference to: System.@LStrPos;|005BE943 E8F45FE4FF call 0040493C005BE948 85C0 test eax, eax005BE94A 7427 jz 005BE973005BE94C A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BE951 50 push eax005BE952 8D45F8 lea eax, [ebp-$08]005BE955 50 push eax

* Possible String Reference to: ' 200 OK'|

005BE956 B9E4EB5B00 mov ecx, $005BEBE4

* Possible String Reference to: ' 403 forbidden'|005BE95B BAF4EB5B00 mov edx, $005BEBF4005BE960 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BE963 E858F5E4FF call 0040DEC0005BE968 8B55F8 mov edx, [ebp-$08]005BE96B 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);|005BE96E E8195AE4FF call 0040438C005BE973 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: ' HTTP/1.1'|005BE976 B80CEC5B00 mov eax, $005BEC0C


15/20

* Reference to: System.@LStrPos;|005BE97B E8BC5FE4FF call 0040493C005BE980 85C0 test eax, eax005BE982 7427 jz 005BE9AB005BE984 A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BE989 50 push eax005BE98A 8D45F4 lea eax, [ebp-$0C]005BE98D 50 push eax

* Possible String Reference to: ' HTTP/1.0'|005BE98E B920EC5B00 mov ecx, $005BEC20

* Possible String Reference to: ' HTTP/1.1'|005BE993 BA0CEC5B00 mov edx, $005BEC0C005BE998 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BE99B E820F5E4FF call 0040DEC0005BE9A0 8B55F4 mov edx, [ebp-$0C]

005BE9A3 8D4378 lea eax, [ebx+$78]* Reference to: System.@LStrAsg(void;void;void;void);|005BE9A6 E8E159E4FF call 0040438C005BE9AB 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: ' %2f'|005BE9AE B834EC5B00 mov eax, $005BEC34


005BE9B3 E8845FE4FF call 0040493C005BE9B8 85C0 test eax, eax005BE9BA 7427 jz 005BE9E3005BE9BC A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BE9C1 50 push eax005BE9C2 8D45F0 lea eax, [ebp-$10]005BE9C5 50 push eax

* Possible String Reference to: ' /'|005BE9C6 B944EC5B00 mov ecx, $005BEC44

* Possible String Reference to: ' %2f'

|005BE9CB BA34EC5B00 mov edx, $005BEC34005BE9D0 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BE9D3 E8E8F4E4FF call 0040DEC0005BE9D8 8B55F0 mov edx, [ebp-$10]005BE9DB 8D4378 lea eax, [ebx+$78]


16/20

* Reference to: System.@LStrAsg(void;void;void;void);|005BE9DE E8A959E4FF call 0040438C005BE9E3 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: ' %20'|005BE9E6 B850EC5B00 mov eax, $005BEC50

* Reference to: System.@LStrPos;|005BE9EB E84C5FE4FF call 0040493C005BE9F0 85C0 test eax, eax005BE9F2 7427 jz 005BEA1B005BE9F4 A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BE9F9 50 push eax005BE9FA 8D45EC lea eax, [ebp-$14]005BE9FD 50 push eax

* Possible String Reference to: ' _'|005BE9FE B960EC5B00 mov ecx, $005BEC60

* Possible String Reference to: ' %20'|005BEA03 BA50EC5B00 mov edx, $005BEC50005BEA08 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BEA0B E8B0F4E4FF call 0040DEC0005BEA10 8B55EC mov edx, [ebp-$14]005BEA13 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);

|005BEA16 E87159E4FF call 0040438C005BEA1B 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: ' Set-Cookie'|005BEA1E B86CEC5B00 mov eax, $005BEC6C

* Reference to: System.@LStrPos;|005BEA23 E8145FE4FF call 0040493C005BEA28 85C0 test eax, eax005BEA2A 7427 jz 005BEA53

005BEA2C A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BEA31 50 push eax005BEA32 8D45E8 lea eax, [ebp-$18]005BEA35 50 push eax

* Possible String Reference to: ' 200 OK'|005BEA36 B9E4EB5B00 mov ecx, $005BEBE4

* Possible String Reference to: ' Set-Cookie'


17/20

|005BEA3B BA6CEC5B00 mov edx, $005BEC6C005BEA40 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BEA43 E878F4E4FF call 0040DEC0005BEA48 8B55E8 mov edx, [ebp-$18]005BEA4B 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);|005BEA4E E83959E4FF call 0040438C005BEA53 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HTTP/1.1 302 Found'|005BEA56 B880EC5B00 mov eax, $005BEC80

* Reference to: System.@LStrPos;|005BEA5B E8DC5EE4FF call 0040493C005BEA60 85C0 test eax, eax

005BEA62 7427 jz 005BEA8B005BEA64 A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BEA69 50 push eax005BEA6A 8D45E4 lea eax, [ebp-$1C]005BEA6D 50 push eax

* Possible String Reference to: 'HTTP/1.1 200 OK'|005BEA6E B99CEC5B00 mov ecx, $005BEC9C

* Possible String Reference to: 'HTTP/1.1 302 Found'|005BEA73 BA80EC5B00 mov edx, $005BEC80

005BEA78 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BEA7B E840F4E4FF call 0040DEC0005BEA80 8B55E4 mov edx, [ebp-$1C]005BEA83 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);|005BEA86 E80159E4FF call 0040438C005BEA8B 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: ' 302 Found'|005BEA8E B8B4EC5B00 mov eax, $005BECB4

* Reference to: System.@LStrPos;|005BEA93 E8A45EE4FF call 0040493C005BEA98 85C0 test eax, eax005BEA9A 7427 jz 005BEAC3


18/20

005BEA9C A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BEAA1 50 push eax005BEAA2 8D45E0 lea eax, [ebp-$20]005BEAA5 50 push eax

* Possible String Reference to: ' 200 OK'|005BEAA6 B9E4EB5B00 mov ecx, $005BEBE4

* Possible String Reference to: ' 302 Found'|005BEAAB BAB4EC5B00 mov edx, $005BECB4005BEAB0 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BEAB3 E808F4E4FF call 0040DEC0005BEAB8 8B55E0 mov edx, [ebp-$20]005BEABB 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);|005BEABE E8C958E4FF call 0040438C

005BEAC3 8B5378 mov edx, [ebx+$78]* Possible String Reference to: ' 302 Found 200'|005BEAC6 B8C8EC5B00 mov eax, $005BECC8

* Reference to: System.@LStrPos;|005BEACB E86C5EE4FF call 0040493C005BEAD0 85C0 test eax, eax005BEAD2 7427 jz 005BEAFB005BEAD4 A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BEAD9 50 push eax

005BEADA 8D45DC lea eax, [ebp-$24]005BEADD 50 push eax

* Possible String Reference to: ' 200 OK'|005BEADE B9E4EB5B00 mov ecx, $005BEBE4

* Possible String Reference to: ' 302 Found 200'|005BEAE3 BAC8EC5B00 mov edx, $005BECC8005BEAE8 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplace

Flags):AnsiString;|005BEAEB E8D0F3E4FF call 0040DEC0005BEAF0 8B55DC mov edx, [ebp-$24]005BEAF3 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);|005BEAF6 E89158E4FF call 0040438C005BEAFB 8B5378 mov edx, [ebx+$78]


19/20

* Possible String Reference to: ' :22'|005BEAFE B8E4EC5B00 mov eax, $005BECE4

* Reference to: System.@LStrPos;|005BEB03 E8345EE4FF call 0040493C005BEB08 85C0 test eax, eax005BEB0A 7427 jz 005BEB33005BEB0C A0D8EB5B00 mov al, byte ptr [$005BEBD8]005BEB11 50 push eax005BEB12 8D45D8 lea eax, [ebp-$28]005BEB15 50 push eax

* Possible String Reference to: ' :443'|005BEB16 B9F4EC5B00 mov ecx, $005BECF4

* Possible String Reference to: ' :22'|005BEB1B BAE4EC5B00 mov edx, $005BECE4005BEB20 8B4378 mov eax, [ebx+$78]

* Reference to: SysUtils.StringReplace(AnsiString;AnsiString;AnsiString;TReplaceFlags):AnsiString;|005BEB23 E898F3E4FF call 0040DEC0005BEB28 8B55D8 mov edx, [ebp-$28]005BEB2B 8D4378 lea eax, [ebx+$78]

* Reference to: System.@LStrAsg(void;void;void;void);|005BEB2E E85958E4FF call 0040438C005BEB33 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HTTP/1.'

|005BEB36 B804ED5B00 mov eax, $005BED04

* Reference to: System.@LStrPos;|005BEB3B E8FC5DE4FF call 0040493C005BEB40 48 dec eax005BEB41 7552 jnz 005BEB95005BEB43 833D60995C0000 cmp dword ptr [$005C9960], +$00005BEB4A 7418 jz 005BEB64005BEB4C 8B1560995C00 mov edx, [$005C9960]005BEB52 8B4370 mov eax, [ebx+$70]005BEB55 8B08 mov ecx, [eax]

005BEB57 FF5178 call dword ptr [ecx+$78]005BEB5A B860995C00 mov eax, $005C9960

* Reference to: System.@LStrClr(void;void);|005BEB5F E8D457E4FF call 00404338005BEB64 8B5378 mov edx, [ebx+$78]

* Possible String Reference to: 'HTTP/1.1 200 OK'|


20/20

005BEB67 B89CEC5B00 mov eax, $005BEC9C

* Reference to: System.@LStrPos;|005BEB6C E8CB5DE4FF call 0040493C005BEB71 48 dec eax005BEB72 7521 jnz 005BEB95005BEB74 833D60995C0000 cmp dword ptr [$005C9960], +$00005BEB7B 7418 jz 005BEB95005BEB7D 8B1560995C00 mov edx, [$005C9960]005BEB83 8B4370 mov eax, [ebx+$70]005BEB86 8B08 mov ecx, [eax]005BEB88 FF5178 call dword ptr [ecx+$78]005BEB8B B860995C00 mov eax, $005C9960

* Reference to: System.@LStrClr(void;void);|005BEB90 E8A357E4FF call 00404338005BEB95 33C0 xor eax, eax005BEB97 5A pop edx005BEB98 59 pop ecx005BEB99 59 pop ecx005BEB9A 648910 mov fs:[eax], edx

****** FINALLY|005BEB9D 68B7EB5B00 push $005BEBB7005BEBA2 8D45D8 lea eax, [ebp-$28]005BEBA5 BA0A000000 mov edx, $0000000A

* Reference to: System.@LStrArrayClr(void;void;Integer);|005BEBAA E8AD57E4FF call 0040435C005BEBAF C3 ret

* Reference to: System.@HandleFinally;

|005BEBB0 E9E350E4FF jmp 00403C98005BEBB5 EBEB jmp 005BEBA2

****** END|005BEBB7 5B pop ebx005BEBB8 8BE5 mov esp, ebp005BEBBA 5D pop ebp005BEBBB C3 ret

dede tsel.txt

Documents