找到关键点了,这个壳好象Soft Defender 1.12好象和sdprotect是一样的说:
004BB531 64:6C INS BYTE PTR ES:[EDI],DX ; I/O 命令
004BB533 6C INS BYTE PTR ES:[EDI],DX ; I/O 命令
004BB534 0051 E8 ADD BYTE PTR DS:[ECX-18],DL
004BB537 07 POP ES ; 修改段寄存器
004BB538 0E PUSH CS
004BB539 0000 ADD BYTE PTR DS:[EAX],AL
004BB53B 3D 00000080 CMP EAX,80000000
004BB540 73 63 JNB SHORT Soft_Def.004BB5A5 下he 004BB540 断下后必须跳
004BB542 56 PUSH ESI
004BB543 57 PUSH EDI
004BB544 E8 8D100000 CALL Soft_Def.004BC5D6
004BB549 68 11954000 PUSH Soft_Def.00409511
004BB54E 8BF8 MOV EDI,EAX
004BB550 E8 0CCBFFFF CALL Soft_Def.004B8061
004BB555 50 PUSH EAX
004BB556 68 2B954000 PUSH Soft_Def.0040952B
004BB55B E8 01CBFFFF CALL Soft_Def.004B8061