今天闲来没事做，就拿个程序想调试一下玩玩，结果发现壳看不出来是什么壳，程序是VB的程序，但是PEID和FI都查不到是什么壳，只能看出来是VB程序，程序如口如下
00861000 > 83EC 04 sub esp,4
00861003 50 push eax
00861004 53 push ebx
00861005 E8 01000000 call sun2_tw.0086100B
0086100A CC int3
0086100B 58 pop eax
0086100C 8BD8 mov ebx,eax
0086100E 40 inc eax
0086100F 2D 00C03400 sub eax,34C000
00861014 2D F4395F00 sub eax,sun2_tw.005F39F4
00861019 05 E9395F00 add eax,sun2_tw.005F39E9 ; ASCII "aL^n"
0086101E 803B CC cmp byte ptr ds:[ebx],0CC
00861021 75 19 jnz short sun2_tw.0086103C
00861023 C603 00 mov byte ptr ds:[ebx],0
00861026 BB 00100000 mov ebx,1000
0086102B 68 D9D26466 push 6664D2D9
00861030 68 861E781F push 1F781E86
00861035 53 push ebx
00861036 50 push eax
00861037 E8 0A000000 call sun2_tw.00861046
0086103C 83C0 14 add eax,14
0086103F 894424 08 mov dword ptr ss:[esp+8],eax
00861043 5B pop ebx
00861044 58 pop eax
00861045 C3 retn
00861046 55 push ebp
00861047 8BEC mov ebp,esp
00861049 60 pushad
0086104A 8B75 08 mov esi,dword ptr ss:[ebp+8]
0086104D 8B4D 0C mov ecx,dword ptr ss:[ebp+C]
00861050 C1E9 02 shr ecx,2
00861053 8B45 10 mov eax,dword ptr ss:[ebp+10]
00861056 8B5D 14 mov ebx,dword ptr ss:[ebp+14]
00861059 EB 08 jmp short sun2_tw.00861063
0086105B 3106 xor dword ptr ds:[esi],eax
0086105D 011E add dword ptr ds:[esi],ebx
0086105F 83C6 04 add esi,4
00861062 49 dec ecx
00861063 0BC9 or ecx,ecx
00861065 ^ 75 F4 jnz short sun2_tw.0086105B
00861067 61 popad
00861068 C9 leave
00861069 C2 1000 retn 10
0086106C 0000 add byte ptr ds:[eax],al
高手提点一下是什么壳
文件地址：http://www.brsbox.com/filebox/down/fc/db55096313b53c5b748848176e4445e4
谢谢高手帮忙
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
