Oepfind 1.59 + Src,ActiveMark 6.x Support
-Recoded VirtualProtectEx hook to only restore region axx rights mods if its in our range not any with execute rights, activemark 2nd layer for example sets on it RW rights without execute so hook wasnt working. Now its more proper.
Still you need to enable virtualprotectex hook to reach 2nd layer or oep.
-Added hook for NtOpenProcess, activemark uses process32next to find all processes and does on them DebugActiveProcess, so it debugs us instead we him:P now he cant do anything to us, attach,open process etc.
收藏
