冰楓論壇

標題: TwMS v202.1_ICS_怪物掉落 [打印本頁]

作者: btb 時間: 2017-10-18 12:25
標題: TwMS v202.1_ICS_怪物掉落
//TwMS v202.1_ICS_怪物掉落
[enable]
alloc(MyLR,4096)
registersymbol(MyLR)
alloc(rx,4)
label(MyLRend)
label(mob1)
label(mobR)
label(mobj)
Alloc(FakeDump,1024)
Alloc(CRCBypass,4)
Label(MSmemcpy)

//================================
MyLR:
      cmp [CRCBypass],0
      je MSmemcpy
      cmp [esp+18],0085e564
      je mob1
      cmp [CRCBypass],0

MyLRend:
      jmp 012818d0
//================================
mob1:
      cmp [CRCBypass],0
      je MyLRend
      mov [esp+18],mobR
      jmp MyLRend
//================================
mobR:
      cmp [edi],02bc2db0
      jne 0085e564
      mov [edi+000003b8],eax
      mov ecx,eax
      xor eax,baadf00d
      xor ecx,esi
      ror ecx,05
      ror eax,05
      add eax,ecx
      mov [edi+000003bc],ecx
      mov [edi+000003c0],eax
      mov eax,FakeDump
      mov [edi],eax
      mov ecx,edi
      mov eax,[edi]
      push ebx
      call dword ptr [eax+2c]
      mov [edi],02bc2db0
      jmp 0085e58f

mobj:
      push ebp
      mov ebp,esp
      sub esp,14
      push ebx
      mov ebx,[0306a1a8]
push esi
      mov esi,ecx
      mov [ebp-08],eax
      push edi
      cmp dword ptr [esi+00000408],02
      jmp 01db968c

MSmemcpy:
      pushad
      mov edi,FakeDump
      mov esi,02bc2db0
      mov ecx,0000080
      repe movsd
      mov edi,FakeDump
      mov [edi+08],00858190
      mov eax,mobj
      mov [edi+0c],eax

      mov [CRCBypass],1
      popad
      jmp MyLR

0303DDF4:
DD MyLR
[disable]
0303DDF4:
DD 012818D0
dealloc(MyLR)
unregistersymbol(MyLR)

歡迎光臨冰楓論壇 (https://bingfong.com/)