1.查壳PE32 无壳2.IDA静态分析(1)main// attributes: thunk int __cdecl main(int argc, const char **argv, const char **envp) { return main_0(argc, argv, envp); }main_0int __cdecl main_0(int argc, const char **argv, const char **envp) { int v3; // eax const char *v4; // eax size_t v5; // eax char v7; // [esp+0h] [ebp-188h] char v8; // [esp+0h] [ebp-188h] signed int j; // [esp+DCh] [ebp-ACh] int i; // [esp+E8h] [ebp-A0h] signed int v11; // [esp+E8h] [ebp-A0h] char Destination[108]; // [esp
Norman1z