TwMS 213.2 惡魔鐮刀不限時間 [ICS]

ke90927

1. //TwMs 213.2 惡魔鐮刀不限時間 [ICS]
   
2. //Author:yutsaihsieh Ics:ke90927
   
3. //转自：https://bingfong.com/thread-622507-1-1.html
   
4. [Enable]
   
5. Alloc(WDhook,1024)
   
6. Label(WDHack1)
   
7. Label(WDHack2)
   
8. Label(WDHack3)
   
9. Label(WDHack4)
   
10. Label(WDHack5)
    
11. Label(WDHack6)
    
12. Label(WDHack7)
    
13. 
    
14. WDhook:
    
15. cmp [esp+88],0237FD56
    
16. jne InterlockedIncrement
    
17. MOV [ESP+88],WDHack1
    
18. jmp InterlockedIncrement
    
19. 
    
20. WDHack1:
    
21. cmp dword ptr [ebp-2C],00
    
22. mov [ebp-40],eax
    
23. je 023811E6
    
24. test eax,eax
    
25. je 023811E6
    
26. mov ecx,[03BBBB48]
    
27. mov [ebp-38],000000FF
    
28. test ecx,ecx
    
29. je WDHack2
    
30. push 000000FF
    
31. call 00E4D5C0
    
32. mov [ebp-38],eax
    
33. WDHack2:
    
34. cmp dword ptr [edi+000156E8],00
    
35. je 0238113E
    
36. push [esi]
    
37. call 023A1610
    
38. add esp,04
    
39. mov ecx,eax
    
40. cmp byte ptr [edi+0001525C],00
    
41. mov [ebp-3C],ecx
    
42. je WDHack3
    
43. mov eax,[edi+000156FC]
    
44. test eax,eax
    
45. je WDHack3
    
46. push 01
    
47. push eax
    
48. call dword ptr [032073EC]
    
49. push eax
    
50. mov ecx,edi
    
51. call 02306900
    
52. test eax,eax
    
53. je 0237FF42
    
54. mov ecx,[ebp-3C]
    
55. WDHack3:
    
56. mov eax,[esi]
    
57. cmp eax,0606D155
    
58. je WDHack4
    
59. cmp eax,0606D156
    
60. je WDHack4
    
61. cmp eax,0021E3D3
    
62. je WDHack4
    
63. cmp eax,002F5150
    
64. je WDHack4
    
65. cmp eax,06ACFFF0
    
66. je WDHack4
    
67. cmp eax,027374E9
    
68. je WDHack4
    
69. cmp eax,04C4DF20
    
70. je WDHack4
    
71. cmp eax,04C4E062
    
72. je WDHack4
    
73. cmp eax,04C4E066
    
74. je WDHack4
    
75. cmp eax,04C4E06B
    
76. je WDHack4
    
77. cmp eax,017F5106
    
78. je WDHack4
    
79. cmp eax,00B8F3DE
    
80. je WDHack4
    
81. cmp eax,07CEEAB0
    
82. je WDHack4
    
83. cmp eax,02366BEB
    
84. je WDHack4
    
85. cmp eax,17D8242E
    
86. je WDHack4
    
87. cmp eax,17D82431
    
88. je WDHack4
    
89. cmp eax,17D7AF14
    
90. je WDHack4
    
91. cmp eax,07CEEABC
    
92. je WDHack4
    
93. cmp eax,17D7D645
    
94. je WDHack4
    
95. cmp eax,07CEEABD
    
96. je WDHack4
    
97. cmp eax,17D7AF40
    
98. jne WDHack5
    
99. WDHack4:
    
100. push [ebp-40]
     
101. mov ecx,[ebp-2C]
     
102. call 007D4B90
     
103. mov ecx,eax
     
104. call 0050EF30
     
105. imul ecx,eax,000003E8
     
106. mov [ebp-3C],ecx
     
107. WDHack5:
     
108. cmp [esi],02366C1C
     
109. jne WDHack6
     
110. push [ebp-40]
     
111. mov ecx,[ebp-2C]
     
112. call 007D4B90
     
113. mov ecx,eax
     
114. call 0085E0D0
     
115. imul ecx,eax,000003E8
     
116. mov [ebp-3C],ecx
     
117. WDHack6:
     
118. mov eax,[esi]
     
119. cmp eax,01524DCB
     
120. jne WDHack7
     
121. call 023FAF70
     
122. sub eax,[edi+00015248]
     
123. js 023811E6
     
124. cmp dword ptr [edi+000156F8],00
     
125. jne 023811E6
     
126. push 00
     
127. push 00
     
128. push 00
     
129. push 00
     
130. push 01
     
131. push 06
     
132. push [ebp-2C]
     
133. mov ecx,edi
     
134. call 021C7EF0
     
135. mov [edi+000156F8],00000001
     
136. jmp 023811E6
     
137. WDHack7:
     
138. cmp eax,01D909A8
     
139. jne 02380148
     
140. call 023FAF70
     
141. sub eax,[edi+00015244]
     
142. cmp eax,[ebp-3C]
     
143. jmp 0237FF52
     
144. push [esi]
     
145. jmp 0237FF18
     
146. 
     
147. 03207134:
     
148. DD WDhook
     
149. 
     
150. [Disable]
     
151. 03207134:
     
152. DD InterlockedIncrement
     
153. DeAlloc(WDGod)
     
154. DeAlloc(WDhook1)

複製代碼