[ICS] TwMS v155.1_ICS_定點吸怪 可用版(轉)
本帖最後由 s880200 於 2013-4-5 13:46 編輯registersymbol(MobVac)
Alloc(MobVac,1024)
registersymbol(Choose)
Alloc(Choose,4)
registersymbol(VacXY)
Alloc(VacXY,8)
label(FakeJmp)
label(FakeJmp2)
label(WriteXY)
label(MobVacX)
Label(EndVac)
Choose:
DD 1
MobVac:
Cmp , 00666092 //eb ? 8b ? e8 ? ? ? ? 83 ? ? 53 83 ? ? 50 -- AOB-2
Jne 00A47D62 //8b 81 c3 8b 89 c2 8b c1
Add Esp, 4
Call 00A47D62
cmp ,0
je 00666092 // =ADD
cmp ,1
je WriteXY
cmp ,2
je MobVacX
jmp 00666092 // =ADD
//-------------------------------------------------------------------
WriteXY:
pushad
mov eax, //8b ? ? ? ? ? 50 57 8d ? ? 50 53 e8 ? ? ? ? 8b
mov eax, //8b ? ? ? ? ? 3b ? ? 7c ? 33 ? 40 5f -8B 86 ?? ?? 00 00 D1 FA 2B C2
mov ,eax
mov eax,
mov eax, //8B 86 ?? ?? 00 00 D1 FA 2B C2 _AOB+4
mov ,eax
mov ,2
popad
jmp 00666092 // =ADD
//-------------------------------------------------------------------
MobVacX:
push eax //50 8b ? e8 ? ? ? ? 23 ? ? 83 ? ? 75 ? 8b -- AOB-2
mov ecx,esi
call 0065de9e
and edi,
cmp edi,ffffffff
jne FakeJmp2
mov ecx,esi
call 0063a58d
cmp eax,edi
jle 006660c2
cmp ,ebx
je FakeJmp2
cmp ,ebx
jne FakeJmp2
mov ecx,esi
call 0063a5b7
test eax,eax
jne FakeJmp2
cmp ,bl
jne FakeJmp2
cmp ,bl
jne FakeJmp2
mov ecx,esi
call 0063a563
cmp eax,03
je FakeJmp
mov ecx,esi
call 0063a563
cmp eax,04
jne FakeJmp2
jmp FakeJmp
//-------------------------------------------------------------------
FakeJmp:
cmp ,ebx
jne FakeJmp2
push 64
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ffffffff
mov ecx,esi
call 0066233b
jmp FakeJmp2
//-------------------------------------------------------------------
FakeJmp2:
mov ecx,esi
pushad
mov ebx,esi
mov eax, //8b ? ? ? ? ? 3b ? 74 ? 83 ? ? eb ? 33 ? 8b ? ? ? ? ? 89
add eax,FFFFFFF4 //更新
mov ebx,eax
add eax,10
Cmp , 1
Je EndVac
Mov , 1
Push Esi
Mov Esi, Eax
Mov Eax,
Mov , Eax //f6 c4 01 75 12 39 8b -AOB_1
Mov word ptr , Ax //8b 86 8d 48 8b 01 8b cf
Mov Eax,
Mov , Eax // -AOB_+4
Mov word ptr , Ax //Mov word ptr +2
Mov Eax, Esi
Pop Esi
mov ,6 //8b cf ff 8b 45 28
mov edi,
mov ecx,eax
add edi,00000088 //更新
push 0
push 0
push 0
push 0
push
push
push 1
call dword ptr
jmp EndVac
//-------------------------------------------------------------------
EndVac:
popad
mov ecx,esi
jmp 0066611A //jmp FakeJmp2 下一個!
00E1DC70:
DD MobVac
00E1DC70: //5
DD 00A47D62
Choose:
DD 1
DeAlloc(MobVac)
DeAlloc(VacXY) 謝謝大大花費自己的楓幣來讓一些剛來了新手能使用，謝謝 謝謝大大花費自己的楓幣來讓一些剛來了新手能使用，謝謝 謝謝大大花費自己的楓幣來讓一些剛來了新手能使用，謝謝
頁:
[1]