armadillo armvar.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 28 行

var VarVal
var VarName
var ActEip

dbh
mov ActEip, eip
ask "VA disponible?"
cmp $RESULT, 0
mov VarVal, $RESULT
je FIN
mov [VarVal], "60"
mov VarName, VarVal
add VarName, 40
mov [VarName], "DAYSLEFT"
exec
pushad
pushfd
push {VarVal}
push {VarName}
call SetEnvironmentVariableA
popfd
popad
jmp {ActEip}
ende
ret

FIN:
ret