0041E043 . 56 PUSH ESI
0041E044 . 8B35 248B4700 MOV ESI,DWORD PTR DS:[<&suel.?Anywhere@@>; suel.?Anywhere@@YAPAVCGoAnywhere@@XZ
0041E04A . 57 PUSH EDI
0041E04B . C785 A0040000 >MOV DWORD PTR SS:[EBP+4A0],0
0041E055 . FFD6 CALL ESI ; <&suel.?Anywhere@@YAPAVCGoAnywhere@@XZ>
0041E057 . 8B3D 288B4700 MOV EDI,DWORD PTR DS:[<&suel.?GetVC@CGoA>; suel.?get_array_ptr@COptionTypeLongArray@@QAEPAVCUIntArray@@XZ
0041E05D . 8BC8 MOV ECX,EAX
0041E05F . FFD7 CALL EDI ; <&suel.?GetVC@CGoAnywhere@@QAEPAVCVPack@@XZ>
0041E061 . 8BC8 MOV ECX,EAX
0041E063 . FF15 348A4700 CALL DWORD PTR DS:[<&suel.?IsInit@CVPack>; suel.?IsInit@CVPack@@QAE_NXZ
0041E069 . 84C0 TEST AL,AL
0041E06B . 75 0E JNZ SHORT Analyze.0041E07B
0041E06D . FFD6 CALL ESI
0041E06F . 8BC8 MOV ECX,EAX
0041E071 . FFD7 CALL EDI
0041E073 . 8BC8 MOV ECX,EAX
0041E075 . FF15 208A4700 CALL DWORD PTR DS:[<&suel.?Init@CVPack@@>; suel.?Init@CVPack@@QAEXXZ
0041E07B > FFD6 CALL ESI
0041E07D . 8BC8 MOV ECX,EAX
0041E07F . FFD7 CALL EDI
0041E081 . 8BC8 MOV ECX,EAX
0041E083 . FF15 3C8A4700 CALL DWORD PTR DS:[<&suel.?IsSecure@CVPa>; suel.?IsSecure@CVPack@@QAEHXZ
0041E089 . 83F8 04 CMP EAX,4
0041E08C . 75 20 JNZ SHORT Analyze.0041E0AE
0041E08E . 6A 00 PUSH 0
0041E090 . FFD6 CALL ESI
0041E092 . 8BC8 MOV ECX,EAX
0041E094 . FFD7 CALL EDI
0041E096 . 8BC8 MOV ECX,EAX
0041E098 . FF15 388B4700 CALL DWORD PTR DS:[<&suel.?IsSupported@C>; suel.?IsSupported@CVPack@@QAE_NW4enuVerFunc@@@Z
0041E09E . 3C 01 CMP AL,1
0041E0A0 . 74 11 JE SHORT Analyze.0041E0B3
0041E0A2 . C785 A0040000 >MOV DWORD PTR SS:[EBP+4A0],1
0041E0AC . EB 3A JMP SHORT Analyze.0041E0E8
0041E0AE > 83F8 06 CMP EAX,6
0041E0B1 . 75 0B JNZ SHORT Analyze.0041E0BE
0041E0B3 > 6A 00 PUSH 0
0041E0B5 . 6A 00 PUSH 0
0041E0B7 . 68 3C814900 PUSH Analyze.0049813C ; ASCII "Copy protection module does not support correct protocols"
0041E0BC . EB 25 JMP SHORT Analyze.0041E0E3
0041E0BE > 83F8 02 CMP EAX,2
0041E0C1 . 75 0B JNZ SHORT Analyze.0041E0CE
0041E0C3 . 6A 00 PUSH 0
0041E0C5 . 6A 00 PUSH 0
0041E0C7 . 68 0C814900 PUSH Analyze.0049810C ; ASCII "Cannot load copy protection library KM64_S.DLL"
0041E0CC . EB 15 JMP SHORT Analyze.0041E0E3
0041E0CE > 83F8 03 CMP EAX,3
0041E0D1 . 6A 00 PUSH 0
0041E0D3 . 6A 00 PUSH 0
0041E0D5 . 75 07 JNZ SHORT Analyze.0041E0DE
0041E0D7 . 68 C8804900 PUSH Analyze.004980C8 ; ASCII "Copy protection driver was installed, need to reboot your system"
0041E0DC . EB 05 JMP SHORT Analyze.0041E0E3
0041E0DE > 68 A4804900 PUSH Analyze.004980A4 ; ASCII "Copy protection module not found!"
0041E0E3 > E8 B6DB0400 CALL <JMP.&MFC42.#1200>
0041E0E8 > 8B4424 10 MOV EAX,DWORD PTR SS:[ESP+10]
0041E0EC . 83F8 01 CMP EAX,1
0041E0EF . 8B85 A0040000 MOV EAX,DWORD PTR SS:[EBP+4A0]
0041E0F5 . 75 11 JNZ SHORT Analyze.0041E108
0041E0F7 . 85C0 TEST EAX,EAX
0041E0F9 . 75 07 JNZ SHORT Analyze.0041E102
0041E0FB . 8BCD MOV ECX,EBP
0041E0FD . E8 AEFEFFFF CALL Analyze.0041DFB0
0041E102 > 8B85 A0040000 MOV EAX,DWORD PTR SS:[EBP+4A0]
0041E108 > 5F POP EDI
0041E109 . 5E POP ESI
0041E10A . 5D POP EBP
0041E10B . C2 0400 RETN 4
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!