http://www.namipan.com/downfile/CoffeeEnt%202.1.0.rar/fd00a60015e37e59439c093c284de8ad5831ed1152882f00
原文件！
用peid 0.94观察是：
Themida/WinLicense V1.8.2.0 + -> Oreans Technologies *
od
载入为：
0062F014 > B8 00000000 mov eax, 0
0062F019 60 pushad
0062F01A 0BC0 or eax, eax
0062F01C 74 68 je short 0062F086
0062F01E E8 00000000 call 0062F023
0062F023 58 pop eax
0062F024 05 53000000 add eax, 53
0062F029 8038 E9 cmp byte ptr [eax], 0E9
0062F02C 75 13 jnz short 0062F041
0062F02E 61 popad
0062F02F EB 45 jmp short 0062F076
0062F031 DB2D 37F06200 fld tbyte ptr [62F037]
0062F037 FFFF ??? ; 未知命令
0062F039 FFFF ??? ; 未知命令
0062F03B FFFF ??? ; 未知命令
0062F03D FFFF ??? ; 未知命令
0062F03F 3D 40E80000 cmp eax, 0E840
0062F044 0000 add byte ptr [eax], al
0062F046 58 pop eax
0062F047 25 00F0FFFF and eax, FFFFF000
0062F04C 33FF xor edi, edi
0062F04E 66:BB 195A mov bx, 5A19
0062F052 66:83C3 34 add bx, 34
0062F056 66:3918 cmp word ptr [eax], bx
0062F059 75 12 jnz short 0062F06D
0062F05B 0FB750 3C movzx edx, word ptr [eax+3C]
0062F05F 03D0 add edx, eax
0062F061 BB E9440000 mov ebx, 44E9
0062F066 83C3 67 add ebx, 67
0062F069 391A cmp dword ptr [edx], ebx
0062F06B 74 07 je short 0062F074
0062F06D 2D 00100000 sub eax, 1000
0062F072 ^ EB DA jmp short 0062F04E
0062F074 8BF8 mov edi, eax
0062F076 B8 569A4B00 mov eax, 004B9A56
0062F07B 03C7 add eax, edi
0062F07D B9 6AF22200 mov ecx, 22F26A
0062F082 03CF add ecx, edi
0062F084 EB 0A jmp short 0062F090
0062F086 B8 569A8B00 mov eax, 008B9A56
0062F08B B9 6AF26200 mov ecx, 0062F26A
0062F090 50 push eax
0062F091 51 push ecx
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
