(PEiD is a well-known shell checking tool, its powerful function can detect almost all shells, and its number has exceeded 470 kinds of PE document packing types and signatures. The arrow in the lower right corner is local → there is a plug-in by the way, which can unscrew part of the encrypted shell and remove the shell and shell.
PEiD_095_20060510_WestKing_HA.exe
Download Instructions.htm
Sinicization of the new century.txt
Chinese description.txt)