// 174.1 全職全圖 // Cracked by Toby [Enable] GlobalAlloc(FMA_SW, 4) Alloc(FullMapAttack, 2048) Label(Step1) Label(Step2) Label(Return) Label(Step1_Main) Label(Step2_Main) Label(Step2_Back) Label(Step2_FakeCall)
FMA_SW: DD 0
FullMapAttack: Cmp [FMA_SW], 00 Je Return Cmp [Esp+0C], 00810D31 Je Step1 Cmp [Esp+0C], 00810B8E Je Step2 Jmp Return
Step1: Mov [Esp+0C], Step1_Main Jmp Return
Step2: Mov [Esp+0C], Step2_Main
Return: Jmp VariantInit
Step1_Main: mov ecx,[ebx+000001D8] mov [ebp-04],0000000E cmp ecx,esi je Step1_Back lea eax,[ebp-7C] push eax push esi push esi push esi push esi push esi push esi lea eax,[ebp-58] push eax lea eax,[ebp-5C] push eax call 004969BB or dword ptr [ebp-04],-01 lea eax,[ebp-7C] push eax call 00457196 pop ecx lea eax,[ebp-5C] push eax lea ecx,[ebx+000008D4] call 007D6D33 test eax,eax Jmp 00810D81 Step1_Back: Jmp 00810960
Step2_Main: mov ecx,[ebx+000001D8] mov [ebp-04],0000000D cmp ecx,esi je Step2_Back lea eax,[ebp-7C] push eax push esi push esi push esi push esi push esi push esi lea eax,[ebp-58] push eax lea eax,[ebp-5C] push eax call 004969BB or [ebp-04],FFFFFFFF lea eax,[ebp-7C] push eax call 00457196 pop ecx lea eax,[ebp-5C] push eax mov ecx,edi call Step2_FakeCall Jmp 00810BD3 Step2_Back: Jmp 00810960
Step2_FakeCall: push esi push edi mov edi,[esp+0C] pushad mov ecx,[01612C64] add ecx,04 push edi call 00573286 popad Jmp 00498286
0118C2A4: DD FullMapAttack [Disable] 0118C2A4: DD VariantInit DeAlloc(FMA_SW) DeAlloc(FullMapAttack)
|