00504C9C |. E8 5BFEFFFF CALL WinHex.00504AFC ; <== Trace into - Luc save file : Trace into vao : 00504AFC /$ 53 PUSH EBX 00504AFD |. 83C4 88 ADD ESP,-78 00504B00 |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60] 00504B04 |. B2 09 MOV DL,9 00504B06 |. E8 5974F0FF CALL WinHex.0040BF64 ; <== Sha256_Init 00504B0B |. 8B15 78225400 MOV EDX,DWORD PTR DS:[542278] ; WinHex.005504F0 00504B11 |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60] 00504B15 |. B9 CB000000 MOV ECX,0CB ; <== ECX = 0xCB 00504B1A |. E8 9575F0FF CALL WinHex.0040C0B4 ; <== SHA256_Update() 00504B1F |. 8D5424 20 LEA EDX,DWORD PTR SS:[ESP+20] 00504B23 |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60] 00504B27 |. E8 0C77F0FF CALL WinHex.0040C238 ; <== SHA256_Finish() 00504B2C |. BA D40A5400 MOV EDX,WinHex.00540AD4 ; ASCII 02,"æõ" 00504B31 |. 8BC4 MOV EAX,ESP 00504B33 |. B9 20000000 MOV ECX,20 00504B38 |. E8 7BE50000 CALL WinHex.005130B8 ; <== Mov DefString 00504B3D |. 54 PUSH ESP ; /Arg4 00504B3E |. 6A 00 PUSH 0 ; |Arg3 = 00000000 00504B40 |. 6A 00 PUSH 0 ; |Arg2 = 00000000 00504B42 |. 6A 00 PUSH 0 ; |Arg1 = 00000000 00504B44 |. B1 01 MOV CL,1 ; | 00504B46 |. 8B15 E88F5300 MOV EDX,DWORD PTR DS:[538FE8] ; |WinHex.00538FF4 00504B4C |. 33C0 XOR EAX,EAX ; | 00504B4E |. E8 E9450300 CALL WinHex.0053913C ; \<== Call to SHA256(DefString) 00504B53 |. 8BD8 MOV EBX,EAX 00504B55 |. 6A 00 PUSH 0 ; /Arg3 = 00000000 00504B57 |. 6A 00 PUSH 0 ; |Arg2 = 00000000 00504B59 |. 6A 00 PUSH 0 ; |Arg1 = 00000000 00504B5B |. 8D5424 2C LEA EDX,DWORD PTR SS:[ESP+2C] ; | 00504B5F |. B9 20000000 MOV ECX,20 ; | 00504B64 |. 8BC3 MOV EAX,EBX ; | 00504B66 |. E8 2D4A0300 CALL WinHex.00539598 ; \<== ****** 00504B6B |. BA 42010000 MOV EDX,142 00504B70 |. 8BC3 MOV EAX,EBX 00504B72 |. E8 21DBEFFF CALL WinHex.00402698 ; <== ****** 00504B77 |. 8BC4 MOV EAX,ESP 00504B79 |. BA 20000000 MOV EDX,20 00504B7E |. E8 0926F0FF CALL WinHex.0040718C ; <== ****** 00504B83 |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60] 00504B87 |. B2 09 MOV DL,9 00504B89 |. E8 D673F0FF CALL WinHex.0040BF64 ; <== Sha256_Init 00504B8E |. 8D5424 20 LEA EDX,DWORD PTR SS:[ESP+20] 00504B92 |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60] 00504B96 |. B9 20000000 MOV ECX,20 00504B9B |. E8 1475F0FF CALL WinHex.0040C0B4 ; <== SHA256_Update() 00504BA0 |. 8B15 78225400 MOV EDX,DWORD PTR DS:[542278] ; WinHex.005504F0 00504BA6 |. 81C2 CB000000 ADD EDX,0CB 00504BAC |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60] 00504BB0 |. B9 10000000 MOV ECX,10 00504BB5 |. E8 FA74F0FF CALL WinHex.0040C0B4 ; <== SHA256_Update() 00504BBA |. 8D5424 40 LEA EDX,DWORD PTR SS:[ESP+40] 00504BBE |. 8D4424 60 LEA EAX,DWORD PTR SS:[ESP+60] 00504BC2 |. E8 7176F0FF CALL WinHex.0040C238 ; <== SHA256_Finish() 00504BC7 |. 8B15 78225400 MOV EDX,DWORD PTR DS:[542278] ; WinHex.005504F0 00504BCD |. 81C2 DB000000 ADD EDX,0DB 00504BD3 |. B8 C4675400 MOV EAX,WinHex.005467C4 00504BD8 |. B9 10000000 MOV ECX,10 00504BDD |. E8 D6E40000 CALL WinHex.005130B8 00504BE2 |. 8D5424 40 LEA EDX,DWORD PTR SS:[ESP+40] 00504BE6 |. 8BC4 MOV EAX,ESP 00504BE8 |. B9 20000000 MOV ECX,20 00504BED |. E8 C6E40000 CALL WinHex.005130B8 00504BF2 |. 54 PUSH ESP ; /Arg4 00504BF3 |. 6A 00 PUSH 0 ; |Arg3 = 00000000 00504BF5 |. 6A 00 PUSH 0 ; |Arg2 = 00000000 00504BF7 |. 6A 00 PUSH 0 ; |Arg1 = 00000000 00504BF9 |. B1 01 MOV CL,1 ; | 00504BFB |. 8B15 E88F5300 MOV EDX,DWORD PTR DS:[538FE8] ; |WinHex.00538FF4 00504C01 |. 33C0 XOR EAX,EAX ; | 00504C03 |. E8 34450300 CALL WinHex.0053913C ; \WinHex.0053913C 00504C08 |. 8BD8 MOV EBX,EAX 00504C0A |. 6A 00 PUSH 0 ; /Arg3 = 00000000 00504C0C |. 6A 00 PUSH 0 ; |Arg2 = 00000000 00504C0E |. 6A 00 PUSH 0 ; |Arg1 = 00000000 00504C10 |. BA C4675400 MOV EDX,WinHex.005467C4 ; | 00504C15 |. B9 10000000 MOV ECX,10 ; | 00504C1A |. 8BC3 MOV EAX,EBX ; | 00504C1C |. E8 DB4A0300 CALL WinHex.005396FC ; \WinHex.005396FC 00504C21 |. BA 42010000 MOV EDX,142 00504C26 |. 8BC3 MOV EAX,EBX 00504C28 |. E8 6BDAEFFF CALL WinHex.00402698 00504C2D |. 8BC4 MOV EAX,ESP 00504C2F |. BA 20000000 MOV EDX,20 00504C34 |. E8 5325F0FF CALL WinHex.0040718C 00504C39 |. 83C4 78 ADD ESP,78 00504C3C |. 5B POP EBX 00504C3D \. C3 RET