软件用PEID查壳为：ASPack 2.12 -> Alexey Solodovnikov,OD脱壳后再次用PEID查询，显示：PowerBASIC/Win 8.00，
软件下载地址：http://download.it168.com/202/209/112704/
该软件可以看到机器号（显示为序列号），但没有让输入注册码的地方。因此我想通过反编译，找到关键跳。但是对此编程语言不是很熟悉。我通过用winhex查看程序，发现：
000060B0 50 72 6F 67 72 61 6D 20 46 69 6C 65 73 5C 43 6F Program Files\Co
000060C0 6D 6D 6F 6E 20 46 69 6C 65 73 5C 4D 69 63 72 6F mmon Files\Micro
000060D0 73 6F 66 74 20 53 68 61 72 65 64 5C 56 46 50 5C soft Shared\VFP\
000060E0 00 00 00 00 14 00 00 00 56 69 73 75 61 6C 46 6F ........VisualFo
000060F0 78 50 72 6F 52 75 6E 74 69 6D 65 2E 00 00 00 00 xProRuntime.....
00006100 13 00 00 00 5C 53 68 65 6C 6C 5C 4F 70 65 6E 5C ....\Shell\Open\
00006110 43 6F 6D 6D 61 6E 64 00 00 00 00 00 00 00 00 89 Command........?
00006120 0C 00 00 00 43 4F 4D 43 54 4C 33 32 2E 44 4C 4C ....COMCTL32.DLL
00006130 00 35 A0 02 14 00 00 00 49 6E 69 74 43 6F 6D 6D .5?....InitComm
00006140 6F 6E 43 6F 6E 74 72 6F 6C 73 45 78 00 4A 05 00 onControlsEx.J..
00006150 02 00 00 00 20 28 00 00 01 00 00 00 29 00 06 00 .... (......)...
00006160 30 00 00 00 D5 D2 B2 BB B5 BD B3 CC D0 F2 CB F9 0...找不到程序所
00006170 D0 E8 D2 AA B5 C4 B6 AF CC AC C1 B4 BD D3 BF E2 需要的动态链接库
00006180 A3 AC B3 CC D0 F2 B2 BB C4 DC BC CC D0 F8 D4 CB ，程序不能继续运
00006190 D0 D0 A3 A1 00 56 56 8B 0F 00 00 00 45 72 72 43 行！.VV?...ErrC
000061A0 6F 64 65 28 31 30 31 29 20 2D 3E 00 02 00 00 00 ode(101) ->.....
000061B0 3C 2D 00 00 08 00 00 00 D0 C5 CF A2 CC E1 CA BE <-......信息提示
000061C0 00 3C 8B 8D 16 00 00 00 CE D2 C3 C7 CA AE B7 D6 .<媿....我们十分
000061D0 B1 A7 C7 B8 B5 D8 CD A8 D6 AA C4 FA A3 BA 00 00 抱歉地通知您：..
000061E0 24 00 00 00 B3 CC D0 F2 D4 CB D0 D0 CA B1 C5 F6 $...程序运行时碰
000061F0 B5 BD C1 CB D2 EC B3 A3 A3 AC CE DE B7 A8 BC CC 到了异常，无法继
00006200 D0 F8 D4 CB D0 D0 A3 A1 00 70 FF FF 08 00 00 00 续运行！.p....
00006210 B4 ED CE F3 CC E1 CA BE 00 00 D9 E8 0C 00 00 00 错误提示..勹....
00006220 4B 65 72 6E 65 6C 33 32 2E 64 6C 6C 00 E0 9E 77 Kernel32.dll.酁w
00006230 0B 00 00 00 45 78 69 74 50 72 6F 63 65 73 73 00 ....ExitProcess.
00006240 0E 00 00 00 56 69 72 74 75 61 6C 50 72 6F 74 65 ....VirtualProte
00006250 63 74 00 FF 12 00 00 00 57 72 69 74 65 50 72 6F ct.....WritePro
00006260 63 65 73 73 4D 65 6D 6F 72 79 00 D9 02 00 00 00 cessMemory.?...
00006270 5C 5C 00 00 03 00 00 00 56 46 50 00 05 00 00 00 \\......VFP.....
00006280 52 2E 44 4C 4C 00 D9 DF 0B 00 00 00 4D 53 56 43 R.DLL.龠....MSVC
00006290 52 37 30 2E 44 4C 4C 00 0B 00 00 00 47 44 49 50 R70.DLL.....GDIP
000062A0 4C 55 53 2E 44 4C 4C 00 0B 00 00 00 4D 53 56 43 LUS.DLL.....MSVC
000062B0 52 37 31 2E 44 4C 4C 00 0E 00 00 00 53 65 74 46 R71.DLL.....SetF
000062C0 69 6C 65 50 6F 69 6E 74 65 72 00 00 08 00 00 00 ilePointer......
000062D0 52 65 61 64 46 69 6C 65 00 74 FF FF 0B 00 00 00 ReadFile.t....
000062E0 43 72 65 61 74 65 46 69 6C 65 41 00 0B 00 00 00 CreateFileA.....
000062F0 43 6C 6F 73 65 48 61 6E 64 6C 65 00 2E 00 00 00 CloseHandle.....
00006300 D3 EB CF B5 CD B3 BA AF CA FD B9 D2 BD D3 CA A7 与系统函数挂接失
00006310 B0 DC A3 AC BF C9 C4 DC D4 CB D0 D0 BF E2 B1 BB 败，可能运行库被
00006320 D1 B9 CB F5 BB F2 B1 BB C6 C6 BB B5 A3 A1 00 E8 压缩或被破坏！.?
00006330 2E 00 00 00 CE D2 C3 C7 CA AE B7 D6 B1 A7 C7 B8 ....我们十分抱歉
00006340 B5 D8 CD A8 D6 AA C4 FA A3 BA B3 CC D0 F2 B2 BB 地通知您：程序不
00006350 D6 A7 B3 D6 C4 FA B5 C4 CF B5 CD B3 D4 CB D0 D0 支持您的系统运行
00006360 A3 A1 00 3B 04 00 00 00 CC E1 CA BE 00 8B 9D 60 ！.;....提示.嫕`
00006370 0A 00 00 00 44 6C 6C 57 69 6E 4D 61 69 6E 00 03 ....DllWinMain..
00006380 FF FF FF FF FF FF FF FF 01 00 00 00 01 08 00 00 ........
00006390 20 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ..........
怀疑是VFP编的程序，经过伪装，才显示为“PowerBASIC/Win 8.00”，但使用unfoxall反编译提示格式不对，无法反编译。
附上我脱壳后的文件
已经捉摸了N天了，从来没见过这种情况。
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
