TWMS v118 MS-OldHS-CRC Bypass

YuYanix

純MS CRC BYPASS支援

1. 
   
2. [Enable]
   
3. Alloc(Hook,512)
   
4. Alloc(FakeDump,9678848)
   
5. Alloc(MyCopyMemory, 128)
   
6. Hook:
   
7. Label(MSCRCBypass)
   
8. Label(BackToMS)
   
9. Label(Title)
   
10. Label(SuccessMsg)
    
11. 
    
12. CreateThread(MyCopyMemory)
    
13. 
    
14. MyCopyMemory:
    
15.     mov     edi, FakeDump        //Target
    
16.     mov     esi, 00401000        //Source
    
17.     mov     ecx, 0024EC00        //Lenght / 4
    
18.     repe    movsd
    
19. 
    
20.     pushad
    
21.     mov eax, 00B1D631
    
22.     lea ebx, [eax+05] //The Target Address - The Next Address
    
23.     sub ebx, MSCRCBypass
    
24.     neg ebx
    
25.     mov byte ptr [eax], e9 //jmp
    
26.     mov [eax+01], ebx //Target AOB
    
27.     push 40 //MB_ICONINFORMATION
    
28.     push Title
    
29.     push SuccessMsg
    
30.     push 00
    
31.     call MessageBoxA
    
32. 
    
33.     popad
    
34.     ret
    
35. 
    
36. MSCRCBypass:
    
37.     Push Esi
    
38.     Cmp  Esi, 00401000
    
39.     Jnge BackToMS
    
40.     Cmp  Esi, 00D3C000
    
41.     Jg   BackToMS
    
42.     Sub  Esi, 00401000
    
43.     Add  Esi, FakeDump        //Dump
    
44. 
    
45. BackToMS:
    
46.     Xor  Ecx, [Esi+Edx*4]
    
47.     And  Ecx, 000000FF
    
48.     Pop  Esi
    
49.     Jmp  00B1D63A
    
50. 
    
51. Title:
    
52.         db      'MapleStory CRC Bypass Script' 00
    
53. SuccessMsg:
    
54.         db      'MapleStory CRC Bypass Successfully!' 00
    
55. [Disable]
    

複製代碼