[ICS] TwMS v155.1_ICS_定點吸怪 可用版(轉)

s880200

[Enable]
registersymbol(MobVac)
Alloc(MobVac,1024)
registersymbol(Choose)
Alloc(Choose,4)
registersymbol(VacXY)
Alloc(VacXY,8)
label(FakeJmp)
label(FakeJmp2)
label(WriteXY)
label(MobVacX)
Label(EndVac)

Choose:
DD 1

MobVac:
Cmp  [Esp], 00666092 //eb ? 8b ? e8 ? ? ? ? 83 ? ? 53 83 ? ? 50 -- AOB-2
Jne  00A47D62 //8b 81     c3 8b    89      c2   8b c1
Add  Esp, 4
Call 00A47D62
cmp [Choose],0
je 00666092   // =ADD
cmp [Choose],1
je WriteXY
cmp [Choose],2
je MobVacX
jmp 00666092  // =ADD



//-------------------------------------------------------------------

WriteXY:
pushad
mov eax,[00fe35ac] //8b ? ? ? ? ? 50 57 8d ? ? 50 53 e8 ? ? ? ? 8b
mov eax,[eax+fa0] //8b ? ? ? ? ? 3b ? ? 7c ? 33 ? 40 5f -8B 86 ?? ?? 00 00 D1 FA 2B C2
mov [VacXY],eax
mov eax,[00fe35ac]
mov eax,[eax+fa4] //8B 86 ?? ?? 00 00 D1 FA 2B C2 _AOB+4
mov [VacXY+4],eax
mov [Choose],2
popad

jmp 00666092 // =ADD


//-------------------------------------------------------------------


MobVacX:
push eax  //50 8b ? e8 ? ? ? ? 23 ? ? 83 ? ? 75 ? 8b  -- AOB-2
mov ecx,esi
call 0065de9e
and edi,[ebp-28]
cmp edi,ffffffff
jne FakeJmp2
mov ecx,esi
call 0063a58d
cmp eax,edi
jle 006660c2
cmp [ebp-20],ebx
je FakeJmp2
cmp [esi+00000578],ebx
jne FakeJmp2
mov ecx,esi
call 0063a5b7
test eax,eax
jne FakeJmp2
cmp [esi+000000b0],bl
jne FakeJmp2
cmp [esi+000000b1],bl
jne FakeJmp2
mov ecx,esi
call 0063a563
cmp eax,03
je FakeJmp
mov ecx,esi
call 0063a563
cmp eax,04
jne FakeJmp2
jmp FakeJmp


//-------------------------------------------------------------------



FakeJmp:
cmp [esi+000004a4],ebx
jne FakeJmp2
push 64
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ffffffff
mov ecx,esi
call 0066233b
jmp FakeJmp2


//-------------------------------------------------------------------


FakeJmp2:
mov ecx,esi
pushad
mov ebx,esi
mov eax,[ebx+00000170] //8b ? ? ? ? ? 3b ? 74 ? 83 ? ? eb ? 33 ? 8b ? ? ? ? ? 89
add eax,FFFFFFF4 //更新
mov ebx,eax
add eax,10
Cmp  [Ebx+04], 1
Je   EndVac
Mov  [Ebx+04], 1
Push Esi
Mov  Esi, Eax
Mov  Eax, [VacXY]
Mov  [Ebx+000006b4], Eax //f6 c4 01 75 12 39 8b   -AOB_1
Mov  word ptr [Ebx+00000250], Ax //8b 86     8d 48  8b 01           8b cf
Mov  Eax, [VacXY+04]
Mov  [Ebx+000006b8], Eax //  -AOB_+4
Mov  word ptr [Ebx+00000252], Ax  //Mov  word ptr [Ebx+00000XXX] +2
Mov  Eax, Esi
Pop Esi
mov [ebx+2b8],6 //8b cf ff      8b 45 28
mov edi,[eax]
mov ecx,eax
add edi,00000088 //更新
push 0
push 0
push 0
push 0
push [VacXY+4]
push [VacXY]
push 1
call dword ptr [edi]
jmp EndVac


//-------------------------------------------------------------------



EndVac:
popad
mov ecx,esi
jmp 0066611A  //jmp FakeJmp2 下一個!

00E1DC70:
DD MobVac

[Disable]
00E1DC70: //5
DD 00A47D62

Choose:
DD 1

DeAlloc(MobVac)
DeAlloc(VacXY)

acv1231234

謝謝大大花費自己的楓幣來讓一些剛來了新手能使用，謝謝

2210943764

謝謝大大花費自己的楓幣來讓一些剛來了新手能使用，謝謝

110125

謝謝大大花費自己的楓幣來讓一些剛來了新手能使用，謝謝