0040B79B \\.\SICE.\\.\SIWVID.\\.\NTICE.\\.\REGSYS.\\.\REGVXG.\\.\FILE
0040B7DB VXG.\\.\FILEM.\\.\TRW.\\.\ICEEXT.Debugger detected - please clo
0040B81B se it down and restart!..Windows NT users: Please note that havi
0040B85B ng the WinIce/SoftIce..service installed means that you are runn
0040B89B ing a debugger!
推测是CreateFileA检测。
0040B01F 3BBD 16140000 cmp edi, dword ptr [ebp+1416] ; Kernel32.ImageBase
0040B025 74 08 je short 0040B02F 修改为7400
0040B027 3BBD 1A140000 cmp edi, dword ptr [ebp+141A] ; User32.ImageBase
0040B02D 75 59 jnz short 0040B088 修改为EB00
在下面就是加密了