冰楓論壇

標題: TWMS V157.1 ICS 全圖攻擊 [打印本頁]

作者: qaz520 時間: 2013-5-29 16:38
標題: TWMS V157.1 ICS 全圖攻擊
[Enable]
Alloc(ItemMove, 256)
Alloc(SetItemVxyX,8)
Label(ItemSet)
Label(ItemSet1)

SetItemVxyX:
Readmem([00f75bac]+0FA0, 8)

ItemMove:
Cmp [Esp],009a0b5a
Jge ItemSet1
Jmp 006282F0

ItemSet1:
Cmp [Esp],009cf353 //[3/3] 0f b7 40 04 50 8d 8d 14 ff ff ff
Jle ItemSet
Jmp 006282F0

ItemSet:
Pushad
Mov Esi,Ecx
mov eax,[SetItemVxyX]
Push eax
Lea Ecx,[Esi+6c8]
Call 005e2b3a
mov eax,[SetItemVxyX+4]
Push eax
Lea Ecx,[Esi+6bC]
Call 005e2b3a //[4/4] 55 8b ec 83 ec 0c ff 05 ?? ?? ?? 00
Popad
Jmp 006282F0

00d42300: //[4/4]
DD ItemMove
[Disable]
00d42300:
DD 006282F0 //55 8b ec 51 51 8d 45 f8 50 81 c1 bc 06 00 00
DeAlloc(ItemMove)

歡迎光臨冰楓論壇 (https://bingfong.com/)