TwMS_v183.2_ICS_SS端人物定位不斷

/*
TwMS_v183.2_ICS_SS端人物定位不斷
ICS:Boby
*/

[Enable]
alloc(People,64)
label(BobyHook)

People:
Cmp [Esp+3C],01055176
jne 00A87226
mov [esp+3C],BobyHook
jmp 00A87226

BobyHook:
mov eax,[esi]
push edi
mov ecx,esi
call dword ptr [eax+3C]
test eax,eax
Jmp 0105518B

01902334:
DD People
[disable]
01902334:
DD 00A87226
DeAlloc(People)