TwMS v1.45_ICS_吸飛怪


//TWMS V1.45.1_ICS_定點吸飛天怪物
//原創:C227545123
//更新:Onion
//ICS:Onion
//鎖率不明請三思
//因為改的點不好所以會變成一排~"~

[Enable]
Alloc(VacFly, 128)
Label(Vacum)
Label(FakeCall)

VacFly:
Cmp [Esp],008E17A3
Jne 008E05EB
Mov [Esp],Vacum
Jmp 008E05EB

Vacum:
fld qword ptr [ebp-24]
sub esp,20
fstp qword ptr [esp+18]
lea eax,[ebp-34]
fld qword ptr [ebp-3c]
fstp qword ptr [esp+10]
fld qword ptr [ebp-2c]
fstp qword ptr [esp+08]
fld qword ptr [ebp-44]
fstp qword ptr [esp]
push eax
call 008dec8d
fld qword ptr [ebp-24]
mov eax,[esi+000000fc]
add esp,24
sub esp,20
mov [ebp+08],eax
fstp qword ptr [esp+18]

lea eax,[ebp-34]

fld qword ptr [ebp-3c]
fstp qword ptr [esp+10]
fld qword ptr [ebp-2c]
fstp qword ptr [esp+08]
fild dword ptr [ebp+08]
fmul qword ptr [00bb5360]
fmul qword ptr [ebp-4c]
fmul qword ptr [ebp-14]
fstp qword ptr [esp]
push eax
call FakeCall
jmp 008e1828

FakeCall:
push ebp
mov ebp,esp
fldz
fld qword ptr [ebp+1c]
DB D8 D1 //st(0),st(1)
fnstsw ax

mov ecx,[ebp+08]
fxch st(1)
fcomp qword ptr [ebp+0c]
fnstsw ax

fcom qword ptr [ecx]
fnstsw ax

Jmp 008DEC4D

00BB5A78:
DD VacFly
[Disable]
00BB5A78:
DD 008E05EB
DeAlloc(VacFly)

留言

本月最夯

偷用電腦,怎知?事件檢視器全記錄!(開機時間、啟動項時間...)