am.patching.script.txt

来自「700个脱壳脚本, 可以放在在OD的ollyscript Plugin中.」· 文本 代码 · 共 23 行

/*
Activemark  "Everything OK!" patching script
Made by: GaBoR {RES}
Thanks to CONDZERO for the good tuts on Activemark!
*/
var x
gpa "GetModuleHandleA","kernel32.dll"
bp $RESULT
run
run
bc $RESULT
rtu
sto
sti
find eip,#837DD800#
mov x,$RESULT
cmt x,"modified code"
add x,3
fill x,1,01
msg "Right click on 'modified code' line & select 'Copy to executable->Selection'"
ret