Alexey Solodovnikov 显示为此壳 点->插件 让peid找到ASProtect 2.1x 壳的具体版本
68 01004A00 PUSH OnlyMe.004A000100401005 E8 01000000 CALL OnlyMe.0040100B0040100A C3 RETN0040100B C3 RETN
68 01A04600 PUSH jl_f.0046A001 F800401005 E8 01000000 CALL jl_f.0040100B 上来就是个CALL,很猛呀F8过他,呵呵不怕0040100A C3 RETN0040100B C3 RETN0040100C 4E DEC ESI0040100D 2F DAS0040100E CD F0 INT 0F000401010 C147 D2 B1 ROL DWORD PTR DS:[EDI-2E],0B1 ; 移动常数超出 1..31 的范围00401014 CB RETF ; 远返回00401015 8134B5 C83FFD9F >XOR DWORD PTR DS:[ESI*4+9FFD3FC8],5243FB>00401020 60 PUSHAD00401021 3BDB CMP EBX,EBX00401023 6E OUTS DX,BYTE PTR ES:[EDI] ; I/O 命令00401024 83BC6F 89E4FAFB >CMP DWORD PTR DS:[EDI+EBP*2+FBFAE489],0B0040102C D83440 FDIV DWORD PTR DS:[EAX+EAX*2]0040102F B1 E9 MOV CL,0E900401031 0807 OR BYTE PTR DS:[EDI],AL00401033 E4 F3 IN AL,0F3 ; I/O 命令00401035 3D 5B78BBC9 CMP EAX,C9BB785B0040103A 06 PUSH ES0040103B F2: PREFIX REPNE: ; 多余的前缀0040103C 44 INC ESP0040103D ^77 F1 JA SHORT jl_f.004010300040103F 2211 AND DL,BYTE PTR DS:[ECX]00401041 8AC9 MOV CL,CL00401043 4F DEC EDI00401044 04 47 ADD AL,4700401046 5F POP EDI00401047 6A BB PUSH -4500401049 ED IN EAX,DX ; I/O 命令0040104A F0:42 LOCK INC EDX ; 不允许锁定前缀