2014年2月6日 星期四

TwMS v1.50.2_ICS_CSMobVac

[Enable]
Alloc(CSMobVac, 512)
Label(FakeJmp1)

CSMobVac:
Push Ebp
Mov Ebp,Esp
Push Ebx
Push Esi
Mov Esi,[Ebp+08]
Xor Ebx,Ebx
Push Edi
Cmp [Esi+14],Ebx
JNE 0097F20E
mov ecx,[00e1cff0]
call 0097f1d9
mov [ebp+08],eax
fild dword ptr [ebp+08]
mov edi,[ebp+0c]
fdiv qword ptr [00c0dc60]
fstp qword ptr [ebp+34]
cmp edi,ebx
je FakeJmp1
fld qword ptr [esi+3c]
push ecx
fsub qword ptr [esi+1c]
push ecx
fmul qword ptr [ebp+34]
fadd qword ptr [esi+1c]
fstp qword ptr [esp]
call 004ea7d0
pop ecx
pop ecx
Mov Eax, [00E20700]
Mov Eax, [Eax+0F98]
mov [edi],eax
jmp FakeJmp1

FakeJmp1:
mov edi,[ebp+10]
cmp edi,ebx
je 0097f2ad
fld qword ptr [esi+44]
push ecx
fsub qword ptr [esi+24]
push ecx
fmul qword ptr [ebp+34]
fadd qword ptr [esi+24]
fstp qword ptr [esp]
call 004ea7d0
pop ecx
pop ecx
Mov Eax, [00E20700]
Mov Eax, [Eax+0F9C]
Jmp 0097F2AB

00c8d9c8: // 5/10 CSMobVac
DD CSMobVac
[Disable]
00c8d9c8:
DD 0097f1fe // 55 8b ec 53 56 8b 75 08 33 db

DeAlloc(CSMobVac)

沒有留言:

張貼留言