TwMS v1.46.1_ICS_地雷無延遲+地雷原地掉

[enable]
registersymbol(Landmine01)
alloc(Landmine01,256)
label(MainStart)
label(Fake1)
label(Fake2)

Landmine01:
cmp [esp],00872F85
jne 008EB848
mov [esp],MainStart
jmp 008EB848

MainStart:
test eax,eax
je Fake1
xor ebx,ebx
jmp Fake1

Fake1:
xor edi,edi
cmp [esi+000064C0],edi
jne Fake2
cmp ebx,edi
call 008C64EC
jg 00872FD5
jmp 00872FDB

Fake2:
cmp ebx,[esi+000064C0]
call 008C64EC
sub eax,00000000
jmp 0087304B


00BC7134:
dd Landmine01
[disable]
00BC7134:
dd 008EB848