- UID
- 175467
- 帖子
- 24511
- 主題
- 1257
- 精華
- 0
- 積分
- 3022
- 楓幣
- 6133
- 威望
- 2438
- 存款
- 137915
- 贊助金額
- 1500
- 推廣
- 0
- GP
- 6069
- 閱讀權限
- 150
- 在線時間
- 4181 小時
- 註冊時間
- 2017-1-18
- 最後登入
- 2024-11-25
|
本帖最後由 btb 於 2021-10-23 19:59 編輯
TwMs 238.2 ICS 技能注入
[Enable]
Alloc(CheckESP,4096)
Label(Skill)
Alloc(skillid,04)
Alloc(args,04)
Registersymbol(args)
Registersymbol(skillid)
Alloc(SkillInjectionICS,2048)
Label(SkillInjection)
Label(hook)
Label(hook1)
skillid:
DD 0
args:
dd 0
CheckESP:
cmp [esp+18],02CCC14D//02CCC142
jne timeGetTime
mov [esp+18],Skill
jmp timeGetTime
Skill:
push eax
mov eax,[skillid]
mov dword ptr [edi+000130E4],eax
mov eax,[args]
mov dword ptr [edi+000130E8],eax
pop eax
mov dword ptr [edi+000130EC],0
jmp 02CCC14D//02CCC142
SkillInjectionICS:
cmp [esp+58],02E4B908
jne GetLastError
mov [esp+58],SkillInjection
jmp GetLastError
SkillInjection:
push eax
mov eax,[0524E300]
mov eax,[eax+14]
mov eax,[eax+00019218]
cmp eax,1
pop eax
jl 02E4B908
push eax
mov eax,[0524EFD8]
mov eax,[eax+4]
cmp eax,2
pop eax
jg 02E4B908
test eax,eax
jne 02E4BB70
mov eax,[edi+000000B8]
push ebx
lea ebx,[edi+000000B8]
mov ecx,ebx
call dword ptr [eax+38]
push eax
mov byte ptr [ebp-01],00
call 0068FF60//call 006A8030
add esp,04
cmp eax,[edi+000130E8]
jmp hook
hook:
cmp [edi+000130E4],0042721E
jne hook1
mov eax,[edi]
mov ecx,edi
call dword ptr [eax+74]
lea edx,[eax-00000960]
cmp edx,64
jb hook1
cmp eax,000007D3
je hook1
mov eax,[ebx]
mov ecx,ebx
call dword ptr [eax+3C]
push eax
call 006A8030
add esp,04
cmp eax,22
jne 02E4BB6F
hook1:
mov ecx,[04386E60]
lea eax,[ebp-08]
push 01
push 00
push 00
push 00
push eax
push [edi+000130E4]
mov [ebp-08],00000000
push [ebp-10]
call 00A116A0
mov esi,eax
test esi,esi
jng 02E4BB6F
mov ecx,[edi+000130E8]
add ecx,-17
cmp ecx,23
jmp 02E4BB70//jmp 02E4BA7E
03AF15A8:
DD CheckESP
03AF1158:
DD SkillInjectionICS
[Disable]
03AF15A8:
DD timeGetTime
03AF1158:
DD GetLastError
DeAlloc(SkillInjectionICS)
DeAlloc(CheckESP)
DeAlloc(skillid)
DeAlloc(args)
UnRegistersymbol(skillid)
UnRegistersymbol(args)
紅色部分是更錯的部分,//後面是正確部分,如果還不行就是ESP堆疊錯誤
|
-
總評分: 楓幣 + 1
查看全部評分
|