Description: When I first came into contact with the reverse side, I may not know what the static shell is, and KANXUE suggested that I send the article to drive the learning atmosphere. So the article came out.
My article is just an IDA tutorial, just using IDC to remove the shell from the IDB file and fix the API symbol, to the procedure that can be analyzed, and not fix the shell PE file.
Also, I took off MSLRHv0.31 a. Relatively simple shell, suitable for beginners
File list (Check if you may need any files):
Download