冰楓論壇

標題: TwMS 189.1_ICS_笨怪 [打印本頁]

作者: ta0926 時間: 2016-5-18 08:05
標題: TwMS 189.1_ICS_笨怪
//TwMS 189.1_ICS_笨怪
[enable]
alloc(Stupid,512)
registersymbol(Stupid)
label(S4)
label(S1)
//================================
Stupid:
cmp [esp+38],01143660
je S1
jmp RtlGetLastWin32Error
S1:
mov [esp+38],S4
jmp RtlGetLastWin32Error
S4:
mov ebx,0
mov [ebp+08],ebx
jmp 01143667 //jne next
//================================
015281b4:
DD Stupid

[disable]
015281b4:
DD RtlGetLastWin32Error

dealloc(Stupid)
unregistersymbol(Stupid)

可以用在怪物跟隨

歡迎光臨冰楓論壇 (https://bingfong.com/)