Option Explicit
Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (pDst As Any, pSrc As Any, ByVal ByteLen As Long)
...
Blast's Security
Blast's Security Lab
2010年3月28日
Partie感染文件修复程序（实用性归零）
注：不保证可用性，可能有错误，且Partie变种极多，此工具只应对其中一种，默认认为文件的基地址就是00400000h，只是作为一个笔记的形式存在于此，不要把这个程序付诸实践……
Option Explicit
Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (pDst As Any, pSrc As Any, ByVal ByteLen As Long)
...
Option Explicit
Private Declare Sub CopyMemory Lib "kernel32" Alias "RtlMoveMemory" (pDst As Any, pSrc As Any, ByVal ByteLen As Long)
...
