All pastes #429392 Raw Edit

Merc

public text v1 · immutable
·published 2007-04-08 05:53 UTC
rendered paste body
00504C9C   |.  E8 5BFEFFFF      CALL WinHex.00504AFC                 ;  <== Trace into - Luc save file :

Trace into vao :

00504AFC   /$  53               PUSH EBX
00504AFD   |.  83C4 88          ADD ESP,-78
00504B00   |.  8D4424 60        LEA EAX,DWORD PTR SS:[ESP+60]
00504B04   |.  B2 09            MOV DL,9
00504B06   |.  E8 5974F0FF      CALL WinHex.0040BF64                 ;  <== Sha256_Init
00504B0B   |.  8B15 78225400    MOV EDX,DWORD PTR DS:[542278]        ;  WinHex.005504F0
00504B11   |.  8D4424 60        LEA EAX,DWORD PTR SS:[ESP+60]
00504B15   |.  B9 CB000000      MOV ECX,0CB                          ;  <== ECX = 0xCB
00504B1A   |.  E8 9575F0FF      CALL WinHex.0040C0B4                 ;  <== SHA256_Update()
00504B1F   |.  8D5424 20        LEA EDX,DWORD PTR SS:[ESP+20]
00504B23   |.  8D4424 60        LEA EAX,DWORD PTR SS:[ESP+60]
00504B27   |.  E8 0C77F0FF      CALL WinHex.0040C238                 ;  <== SHA256_Finish()
00504B2C   |.  BA D40A5400      MOV EDX,WinHex.00540AD4              ;  ASCII 02,"æõ"
00504B31   |.  8BC4             MOV EAX,ESP
00504B33   |.  B9 20000000      MOV ECX,20
00504B38   |.  E8 7BE50000      CALL WinHex.005130B8                 ;  <== Mov DefString
00504B3D   |.  54               PUSH ESP                             ; /Arg4
00504B3E   |.  6A 00            PUSH 0                               ; |Arg3 = 00000000
00504B40   |.  6A 00            PUSH 0                               ; |Arg2 = 00000000
00504B42   |.  6A 00            PUSH 0                               ; |Arg1 = 00000000
00504B44   |.  B1 01            MOV CL,1                             ; |
00504B46   |.  8B15 E88F5300    MOV EDX,DWORD PTR DS:[538FE8]        ; |WinHex.00538FF4
00504B4C   |.  33C0             XOR EAX,EAX                          ; |
00504B4E   |.  E8 E9450300      CALL WinHex.0053913C                 ; \<== Call to SHA256(DefString)
00504B53   |.  8BD8             MOV EBX,EAX
00504B55   |.  6A 00            PUSH 0                               ; /Arg3 = 00000000
00504B57   |.  6A 00            PUSH 0                               ; |Arg2 = 00000000
00504B59   |.  6A 00            PUSH 0                               ; |Arg1 = 00000000
00504B5B   |.  8D5424 2C        LEA EDX,DWORD PTR SS:[ESP+2C]        ; |
00504B5F   |.  B9 20000000      MOV ECX,20                           ; |
00504B64   |.  8BC3             MOV EAX,EBX                          ; |
00504B66   |.  E8 2D4A0300      CALL WinHex.00539598                 ; \<== ******
00504B6B   |.  BA 42010000      MOV EDX,142
00504B70   |.  8BC3             MOV EAX,EBX
00504B72   |.  E8 21DBEFFF      CALL WinHex.00402698                 ;  <== ******
00504B77   |.  8BC4             MOV EAX,ESP
00504B79   |.  BA 20000000      MOV EDX,20
00504B7E   |.  E8 0926F0FF      CALL WinHex.0040718C                 ;  <== ******
00504B83   |.  8D4424 60        LEA EAX,DWORD PTR SS:[ESP+60]
00504B87   |.  B2 09            MOV DL,9
00504B89   |.  E8 D673F0FF      CALL WinHex.0040BF64                 ;  <== Sha256_Init
00504B8E   |.  8D5424 20        LEA EDX,DWORD PTR SS:[ESP+20]
00504B92   |.  8D4424 60        LEA EAX,DWORD PTR SS:[ESP+60]
00504B96   |.  B9 20000000      MOV ECX,20
00504B9B   |.  E8 1475F0FF      CALL WinHex.0040C0B4                 ;  <== SHA256_Update()
00504BA0   |.  8B15 78225400    MOV EDX,DWORD PTR DS:[542278]        ;  WinHex.005504F0
00504BA6   |.  81C2 CB000000    ADD EDX,0CB
00504BAC   |.  8D4424 60        LEA EAX,DWORD PTR SS:[ESP+60]
00504BB0   |.  B9 10000000      MOV ECX,10
00504BB5   |.  E8 FA74F0FF      CALL WinHex.0040C0B4                 ;  <== SHA256_Update()
00504BBA   |.  8D5424 40        LEA EDX,DWORD PTR SS:[ESP+40]
00504BBE   |.  8D4424 60        LEA EAX,DWORD PTR SS:[ESP+60]
00504BC2   |.  E8 7176F0FF      CALL WinHex.0040C238                 ;  <== SHA256_Finish()
00504BC7   |.  8B15 78225400    MOV EDX,DWORD PTR DS:[542278]        ;  WinHex.005504F0
00504BCD   |.  81C2 DB000000    ADD EDX,0DB
00504BD3   |.  B8 C4675400      MOV EAX,WinHex.005467C4
00504BD8   |.  B9 10000000      MOV ECX,10
00504BDD   |.  E8 D6E40000      CALL WinHex.005130B8
00504BE2   |.  8D5424 40        LEA EDX,DWORD PTR SS:[ESP+40]
00504BE6   |.  8BC4             MOV EAX,ESP
00504BE8   |.  B9 20000000      MOV ECX,20
00504BED   |.  E8 C6E40000      CALL WinHex.005130B8
00504BF2   |.  54               PUSH ESP                             ; /Arg4
00504BF3   |.  6A 00            PUSH 0                               ; |Arg3 = 00000000
00504BF5   |.  6A 00            PUSH 0                               ; |Arg2 = 00000000
00504BF7   |.  6A 00            PUSH 0                               ; |Arg1 = 00000000
00504BF9   |.  B1 01            MOV CL,1                             ; |
00504BFB   |.  8B15 E88F5300    MOV EDX,DWORD PTR DS:[538FE8]        ; |WinHex.00538FF4
00504C01   |.  33C0             XOR EAX,EAX                          ; |
00504C03   |.  E8 34450300      CALL WinHex.0053913C                 ; \WinHex.0053913C
00504C08   |.  8BD8             MOV EBX,EAX
00504C0A   |.  6A 00            PUSH 0                               ; /Arg3 = 00000000
00504C0C   |.  6A 00            PUSH 0                               ; |Arg2 = 00000000
00504C0E   |.  6A 00            PUSH 0                               ; |Arg1 = 00000000
00504C10   |.  BA C4675400      MOV EDX,WinHex.005467C4              ; |
00504C15   |.  B9 10000000      MOV ECX,10                           ; |
00504C1A   |.  8BC3             MOV EAX,EBX                          ; |
00504C1C   |.  E8 DB4A0300      CALL WinHex.005396FC                 ; \WinHex.005396FC
00504C21   |.  BA 42010000      MOV EDX,142
00504C26   |.  8BC3             MOV EAX,EBX
00504C28   |.  E8 6BDAEFFF      CALL WinHex.00402698
00504C2D   |.  8BC4             MOV EAX,ESP
00504C2F   |.  BA 20000000      MOV EDX,20
00504C34   |.  E8 5325F0FF      CALL WinHex.0040718C
00504C39   |.  83C4 78          ADD ESP,78
00504C3C   |.  5B               POP EBX
00504C3D   \.  C3               RET