工具和学习教程下载地址
http://www.anqn.com/soft/
http://www.anqn.com/ke/soft/
http://www.dywt.com.cn/pdown.htm
gua
http://www.zuowg.com/wg/Index.html
http://www.zuowg.com/
http://42724920.ys168.com/
8BB37E4AB9463B48BBE83EF2ECDD4DFB1387A87D29C840D88C80AA90AE9D848E9566

ftp://222.135.126.66/
http://down.51cto.com/tag-wep.htmlvar RelStart

仙魔挂脱壳插件
var RelEnd
var RelLen
var addr
var base
CheckVer:
cmp $VERSION,""
ja start
msg ""
ret
start:
gmi eip,MODULEBASE
mov base,$RESULT
find eip,#2BD074#
cmp $RESULT,0
je lblabort
go $RESULT
lbl1:
cmp edx,eax
jne lbl2
mov addr,eip
add addr,2
mov [addr],#75#
lbl2:
sto
sto
sto
sto
sto
sto
mov RelStart,esi
cmp addr,0
je lbl3
mov [addr],#74#
lbl3:
find eip,#eb00#
cmp $RESULT,0
je lblabort
mov addr,$RESULT
add addr,2
fill addr,4,90
find addr,#EB??8B95#
cmp $RESULT,0
je lblabort
mov addr,$RESULT
add addr,2
go addr
mov RelEnd,esi
sub RelEnd,base
mov RelLen,RelEnd
sub RelLen,RelStart
lbl4:
findop eip,#C3#
cmp $RESULT,0
je lblabort
go $RESULT
sto
lbl5:
eval ""
log $RESULT
cmt eip,$RESULT
lblend:
msg ""
ret
lblabort:
msg ""
ret

[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法