0041C230 > 6A FF PUSH -1 0041C232 . 68 09284300 PUSH MOV_Conv.00432809 ; SE handler installation 0041C237 . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0] 0041C23D . 50 PUSH EAX 0041C23E . 64:8925 000000>MOV DWORD PTR FS:[0],ESP 0041C245 . 81EC 94000000 SUB ESP,94 0041C24B . 8B8424 A400000>MOV EAX,DWORD PTR SS:[ESP+A4] 0041C252 . 53 PUSH EBX 0041C253 . 56 PUSH ESI 0041C254 . 50 PUSH EAX 0041C255 . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10] 0041C259 . C74424 60 93D1>MOV DWORD PTR SS:[ESP+60],A419D193 0041C261 . C74424 64 8837>MOV DWORD PTR SS:[ESP+64],8ED03788 0041C269 . C74424 68 24FE>MOV DWORD PTR SS:[ESP+68],F38EFE24 0041C271 . C74424 6C 454B>MOV DWORD PTR SS:[ESP+6C],3D214B45 0041C279 . C74424 70 3C5C>MOV DWORD PTR SS:[ESP+70],9C9F5C3C 0041C281 . C74424 74 4392>MOV DWORD PTR SS:[ESP+74],354D9243 0041C289 . C74424 78 5EC3>MOV DWORD PTR SS:[ESP+78],1502C35E 0041C291 . C74424 7C 975D>MOV DWORD PTR SS:[ESP+7C],95075D97 0041C299 . E8 B2330100 CALL 0041C29E . 8B8C24 B000000>MOV ECX,DWORD PTR SS:[ESP+B0] 0041C2A5 . C78424 A400000>MOV DWORD PTR SS:[ESP+A4],0 0041C2B0 . 51 PUSH ECX 0041C2B1 . 8D4C24 0C LEA ECX,DWORD PTR SS:[ESP+C] 0041C2B5 . E8 96330100 CALL 0041C2BA . 8B5424 0C MOV EDX,DWORD PTR SS:[ESP+C] 0041C2BE . 8B35 B8354400 MOV ESI,DWORD PTR DS:[<&MSVCRT._mbscmp>] ; msvcrt._mbscmp 0041C2C4 . 68 D00C4400 PUSH MOV_Conv.00440CD0 ; /s2 = "" 0041C2C9 . 52 PUSH EDX ; |s1 0041C2CA . C68424 AC00000>MOV BYTE PTR SS:[ESP+AC],1 ; | 0041C2D2 . FFD6 CALL ESI ; \_mbscmp 0041C2D4 . 83C4 08 ADD ESP,8 0041C2D7 . 85C0 TEST EAX,EAX 0041C2D9 . 0F84 0F020000 JE MOV_Conv.0041C4EE 0041C2DF . 8B4424 08 MOV EAX,DWORD PTR SS:[ESP+8] 0041C2E3 . 68 D00C4400 PUSH MOV_Conv.00440CD0 0041C2E8 . 50 PUSH EAX 0041C2E9 . FFD6 CALL ESI 0041C2EB . 83C4 08 ADD ESP,8 0041C2EE . 85C0 TEST EAX,EAX 0041C2F0 . 0F84 F8010000 JE MOV_Conv.0041C4EE 0041C2F6 . 57 PUSH EDI 0041C2F7 . 6A 00 PUSH 0 0041C2F9 . 8D4C24 44 LEA ECX,DWORD PTR SS:[ESP+44] 0041C2FD . E8 7256FEFF CALL MOV_Conv.00401974 0041C302 . 6A 00 PUSH 0 0041C304 . 8D4C24 4C LEA ECX,DWORD PTR SS:[ESP+4C] 0041C308 . C68424 AC00000>MOV BYTE PTR SS:[ESP+AC],2 0041C310 . E8 5F56FEFF CALL MOV_Conv.00401974 0041C315 . B3 03 MOV BL,3 0041C317 . 68 01000100 PUSH 10001 0041C31C . 8D4C24 5C LEA ECX,DWORD PTR SS:[ESP+5C] 0041C320 . 889C24 AC00000>MOV BYTE PTR SS:[ESP+AC],BL 0041C327 . E8 4856FEFF CALL MOV_Conv.00401974 0041C32C . 8D4C24 58 LEA ECX,DWORD PTR SS:[ESP+58] 0041C330 . C68424 A800000>MOV BYTE PTR SS:[ESP+A8],4 0041C338 . 51 PUSH ECX 0041C339 . 8D4C24 4C LEA ECX,DWORD PTR SS:[ESP+4C] 0041C33D . E8 355DFEFF CALL MOV_Conv.00402077 0041C342 . 8D4C24 58 LEA ECX,DWORD PTR SS:[ESP+58] 0041C346 . 889C24 A800000>MOV BYTE PTR SS:[ESP+A8],BL 0041C34D . E8 495CFEFF CALL MOV_Conv.00401F9B 0041C352 . 8D5424 60 LEA EDX,DWORD PTR SS:[ESP+60] 0041C356 . 6A 08 PUSH 8 0041C358 . 52 PUSH EDX 0041C359 . 8D4C24 48 LEA ECX,DWORD PTR SS:[ESP+48] 0041C35D . E8 8E57FEFF CALL MOV_Conv.00401AF0 0041C362 . B9 08000000 MOV ECX,8 0041C367 . 33C0 XOR EAX,EAX 0041C369 . 8D7C24 18 LEA EDI,DWORD PTR SS:[ESP+18] 0041C36D . 8D5424 2C LEA EDX,DWORD PTR SS:[ESP+2C] 0041C371 . F3:AB REP STOS DWORD PTR ES:[EDI] 0041C373 . 8D4424 34 LEA EAX,DWORD PTR SS:[ESP+34] 0041C377 . 8D4C24 30 LEA ECX,DWORD PTR SS:[ESP+30] 0041C37B . 50 PUSH EAX 0041C37C . 51 PUSH ECX 0041C37D . 8D4424 30 LEA EAX,DWORD PTR SS:[ESP+30] 0041C381 . 52 PUSH EDX 0041C382 . 8D4C24 30 LEA ECX,DWORD PTR SS:[ESP+30] 0041C386 . 50 PUSH EAX 0041C387 . 8D5424 30 LEA EDX,DWORD PTR SS:[ESP+30] 0041C38B . 51 PUSH ECX 0041C38C . 8D4424 30 LEA EAX,DWORD PTR SS:[ESP+30] 0041C390 . 52 PUSH EDX 0041C391 . 8B5424 24 MOV EDX,DWORD PTR SS:[ESP+24] 0041C395 . 8D4C24 30 LEA ECX,DWORD PTR SS:[ESP+30] 0041C399 . 50 PUSH EAX 0041C39A . 51 PUSH ECX 0041C39B . 68 B0FD4300 PUSH MOV_Conv.0043FDB0 ; |format = "%08lX-%08lX-%08lX-%08lX-%08lX-%08lX-%08lX-%08lX " 0041C3A0 . 52 PUSH EDX ; |s 0041C3A1 . FF15 24364400 CALL DWORD PTR DS:[<&MSVCRT.sscanf>] ; \sscanf 0041C3A7 . 8B4424 50 MOV EAX,DWORD PTR SS:[ESP+50] 0041C3AB . 8B4C24 4C MOV ECX,DWORD PTR SS:[ESP+4C] 0041C3AF . 8B7C24 48 MOV EDI,DWORD PTR SS:[ESP+48] 0041C3B3 . 8B5424 44 MOV EDX,DWORD PTR SS:[ESP+44] 0041C3B7 . 03C1 ADD EAX,ECX 0041C3B9 . 8B4C24 5C MOV ECX,DWORD PTR SS:[ESP+5C] 0041C3BD . 03C7 ADD EAX,EDI 0041C3BF . 8B7C24 58 MOV EDI,DWORD PTR SS:[ESP+58] 0041C3C3 . 03C2 ADD EAX,EDX 0041C3C5 . 8B5424 40 MOV EDX,DWORD PTR SS:[ESP+40] 0041C3C9 . 33C8 XOR ECX,EAX 0041C3CB . 8B4424 54 MOV EAX,DWORD PTR SS:[ESP+54] 0041C3CF . 83C4 28 ADD ESP,28 0041C3D2 . 03C2 ADD EAX,EDX 0041C3D4 . 894C24 34 MOV DWORD PTR SS:[ESP+34],ECX 0041C3D8 . 33F8 XOR EDI,EAX 0041C3DA . 6A 00 PUSH 0 0041C3DC . 8D4C24 3C LEA ECX,DWORD PTR SS:[ESP+3C] 0041C3E0 . 897C24 34 MOV DWORD PTR SS:[ESP+34],EDI 0041C3E4 . E8 8B55FEFF CALL MOV_Conv.00401974 0041C3E9 . 8D4C24 18 LEA ECX,DWORD PTR SS:[ESP+18] 0041C3ED . 6A 08 PUSH 8 0041C3EF . 51 PUSH ECX 0041C3F0 . 8D4C24 40 LEA ECX,DWORD PTR SS:[ESP+40] 0041C3F4 . C68424 B000000>MOV BYTE PTR SS:[ESP+B0],5 0041C3FC . E8 EF56FEFF CALL MOV_Conv.00401AF0 0041C401 . 8D5424 38 LEA EDX,DWORD PTR SS:[ESP+38] 0041C405 . 8D4424 50 LEA EAX,DWORD PTR SS:[ESP+50] 0041C409 . 52 PUSH EDX 0041C40A . 50 PUSH EAX 0041C40B . 8D4C24 48 LEA ECX,DWORD PTR SS:[ESP+48] 0041C40F . E8 245AFEFF CALL MOV_Conv.00401E38 0041C414 . B9 08000000 MOV ECX,8 0041C419 . 33C0 XOR EAX,EAX 0041C41B . 8D7C24 18 LEA EDI,DWORD PTR SS:[ESP+18] 0041C41F . 6A 08 PUSH 8 0041C421 . F3:AB REP STOS DWORD PTR ES:[EDI] 0041C423 . 8D4C24 1C LEA ECX,DWORD PTR SS:[ESP+1C] 0041C427 . C68424 AC00000>MOV BYTE PTR SS:[ESP+AC],6 0041C42F . 51 PUSH ECX 0041C430 . 8D4C24 58 LEA ECX,DWORD PTR SS:[ESP+58] 0041C434 . E8 F85BFEFF CALL MOV_Conv.00402031 0041C439 . B9 08000000 MOV ECX,8 0041C43E . 33C0 XOR EAX,EAX 0041C440 . 8DBC24 8000000>LEA EDI,DWORD PTR SS:[ESP+80] 0041C447 . F3:AB REP STOS DWORD PTR ES:[EDI] 0041C449 . 5F POP EDI 0041C44A > 8A5404 17 MOV DL,BYTE PTR SS:[ESP+EAX+17] 0041C44E . 8A4C04 16 MOV CL,BYTE PTR SS:[ESP+EAX+16] 0041C452 . 885404 7C MOV BYTE PTR SS:[ESP+EAX+7C],DL 0041C456 . 8B5404 14 MOV EDX,DWORD PTR SS:[ESP+EAX+14] 0041C45A . 884C04 7D MOV BYTE PTR SS:[ESP+EAX+7D],CL 0041C45E . 8A4C04 14 MOV CL,BYTE PTR SS:[ESP+EAX+14] 0041C462 . C1EA 08 SHR EDX,8 0041C465 . 885404 7E MOV BYTE PTR SS:[ESP+EAX+7E],DL 0041C469 . 884C04 7F MOV BYTE PTR SS:[ESP+EAX+7F],CL 0041C46D . 83C0 04 ADD EAX,4 0041C470 . 83F8 20 CMP EAX,20 0041C473 .^7C D5 JL SHORT MOV_Conv.0041C44A 0041C475 . 8D5424 7C LEA EDX,DWORD PTR SS:[ESP+7C] 0041C479 . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10] 0041C47D . 52 PUSH EDX 0041C47E . E8 CD310100 CALL 0041C483 . 8B4424 10 MOV EAX,DWORD PTR SS:[ESP+10] 0041C487 . 8B4C24 0C MOV ECX,DWORD PTR SS:[ESP+C] 0041C48B . 50 PUSH EAX 0041C48C . 51 PUSH ECX 0041C48D . FFD6 CALL ESI 0041C48F . 83C4 08 ADD ESP,8 0041C492 . 8D4C24 10 LEA ECX,DWORD PTR SS:[ESP+10] 0041C496 . 85C0 TEST EAX,EAX 0041C498 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],6 0041C4A0 . 0F84 86000000 JE MOV_Conv.0041C52C 0041C4A6 . E8 792D0100 CALL 0041C4AB . 8D4C24 4C LEA ECX,DWORD PTR SS:[ESP+4C] 0041C4AF . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],5 0041C4B7 . E8 DF5AFEFF CALL MOV_Conv.00401F9B 0041C4BC . 8D4C24 34 LEA ECX,DWORD PTR SS:[ESP+34] 0041C4C0 . 889C24 A400000>MOV BYTE PTR SS:[ESP+A4],BL 0041C4C7 . E8 CF5AFEFF CALL MOV_Conv.00401F9B 0041C4CC . 8D4C24 44 LEA ECX,DWORD PTR SS:[ESP+44] 0041C4D0 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],8 0041C4D8 . E8 BE5AFEFF CALL MOV_Conv.00401F9B 0041C4DD . 8D4C24 3C LEA ECX,DWORD PTR SS:[ESP+3C] 0041C4E1 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],1 0041C4E9 . E8 AD5AFEFF CALL MOV_Conv.00401F9B 0041C4EE > 8D4C24 08 LEA ECX,DWORD PTR SS:[ESP+8] 0041C4F2 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],0 0041C4FA . E8 252D0100 CALL 0041C4FF . 8D4C24 0C LEA ECX,DWORD PTR SS:[ESP+C] 0041C503 . C78424 A400000>MOV DWORD PTR SS:[ESP+A4],-1 0041C50E . E8 112D0100 CALL 0041C513 . 5E POP ESI 0041C514 . 33C0 XOR EAX,EAX 0041C516 . 5B POP EBX 0041C517 . 8B8C24 9400000>MOV ECX,DWORD PTR SS:[ESP+94] 0041C51E . 64:890D 000000>MOV DWORD PTR FS:[0],ECX 0041C525 . 81C4 A0000000 ADD ESP,0A0 0041C52B . C3 RETN 0041C52C > E8 F32C0100 CALL 0041C531 . 8D4C24 4C LEA ECX,DWORD PTR SS:[ESP+4C] 0041C535 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],5 0041C53D . E8 595AFEFF CALL MOV_Conv.00401F9B 0041C542 . 8D4C24 34 LEA ECX,DWORD PTR SS:[ESP+34] 0041C546 . 889C24 A400000>MOV BYTE PTR SS:[ESP+A4],BL 0041C54D . E8 495AFEFF CALL MOV_Conv.00401F9B 0041C552 . 8D4C24 44 LEA ECX,DWORD PTR SS:[ESP+44] 0041C556 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],9 0041C55E . E8 385AFEFF CALL MOV_Conv.00401F9B 0041C563 . 8D4C24 3C LEA ECX,DWORD PTR SS:[ESP+3C] 0041C567 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],1 0041C56F . E8 275AFEFF CALL MOV_Conv.00401F9B 0041C574 . 8D4C24 08 LEA ECX,DWORD PTR SS:[ESP+8] 0041C578 . C68424 A400000>MOV BYTE PTR SS:[ESP+A4],0 0041C580 . E8 9F2C0100 CALL 0041C585 . 8D4C24 0C LEA ECX,DWORD PTR SS:[ESP+C] 0041C589 . C78424 A400000>MOV DWORD PTR SS:[ESP+A4],-1 0041C594 . E8 8B2C0100 CALL 0041C599 . 8B8C24 9C00000>MOV ECX,DWORD PTR SS:[ESP+9C] 0041C5A0 . 5E POP ESI 0041C5A1 . B8 01000000 MOV EAX,1 0041C5A6 . 5B POP EBX 0041C5A7 . 64:890D 000000>MOV DWORD PTR FS:[0],ECX 0041C5AE . 81C4 A0000000 ADD ESP,0A0 0041C5B4 . C3 RETN