TwMS v150_ICS_物品過慮

❀★☠゚ 物 品 過 濾 代 碼 集 中 串 ☠★ ❀ 


//TwMS v150_ICS_物品過慮
//update:kkmomo

[Enable]
Registersymbol(CheckESP)
Alloc(CheckESP,512)
Registersymbol(ItemList)
Alloc(ItemList,204800)
Label(HookESP)
Label(HookFun)
Label(HookOr1)
Label(HookOr2)
Label(Filter)
Label(Skip)
Label(End)

ItemList:
//請在以下加入欲過濾名單


DD 003FA130

//請在以上加入欲過濾名單
DD 00

CheckESP:
Cmp [Esp+6C], 004EEFDA
Je HookESP
Jmp 0072C5C3

HookESP:
mov [Esp+6C], HookFun
jmp 0072C5C3

HookFun:
mov eax,[ebp-1C]
mov esi,[ebp-50]
mov [esi+1C],al
cmp eax,01
je HookOr1
cmp eax,02
je HookOr1
xor al,al
jmp HookOr2
HookOr1:
mov al,01
HookOr2:
mov [esi+1D],al
mov [esi+20],edi
mov edi,[ebp+08]
mov ecx,edi
call 00408b13
movzx eax,al
mov ecx,edi
//xor eax, eax //money
mov [esi+30],eax
call 00408b6f
push esi
mov esi,ItemList

Filter:
cmp eax,C350
jle End
cmp dword ptr ds:[esi],0
Je End
cmp dword ptr ds:[esi],eax
je Skip
add esi,4
jmp Filter
Skip:
xor eax,eax
End:
pop esi
jmp 004EF010

00DFCA4C:
DD CheckESP

[Disable]
00DFCA4C:
DD 0072C5C3

UnRegistersymbol(CheckESP)
DeAlloc(CheckESP)
UnRegistersymbol(ItemList)
DeAlloc(ItemList)

留言

本月最夯

偷用電腦,怎知?事件檢視器全記錄!(開機時間、啟動項時間...)