某软件加密狗动态库文件修改问题-付费问答-看雪-安全社区|安全招聘|kanxue.com

[旧帖] 某软件加密狗动态库文件修改问题 0.00雪花

发表于: 2014-12-8 21:37 4026

[旧帖] 某软件加密狗动态库文件修改问题 0.00雪花

dally

2014-12-8 21:37

4026

最近在学习和谐某软件的加密狗，思路是：重新编写构造一个和加密狗API一样的DLL动态库文件，我认为应该修改read部分代码，经我分析，搞了几天都没能成功，可能是我的哪个步骤出错了，现请高手指点指点，谢谢！（dll文件在压缩包内，此狗为深思灵锐i）下面是read的一段：
地址    十六进制    反汇编
---------------------------------------------------------------
55078110 55          PUSH EBP
55078111 8BEC          MOV EBP,ESP
55078113 51          PUSH ECX
55078114 56          PUSH ESI
55078115 57          PUSH EDI
55078116 E8 95C0FFFF CALL dongle_MT.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507811B 8BF0          MOV ESI,EAX
5507811D 85F6          TEST ESI,ESI
5507811F 75 07       JNZ SHORT 55078128
55078121 BF 06090000 MOV EDI,906
55078126 EB 5C       JMP SHORT 55078184
55078128 8B45 14       MOV EAX,SS:[EBP+14]
5507812B 83E8 00       SUB EAX,0
5507812E 74 08       JE SHORT 55078138
55078130 48          DEC EAX
55078131 B8 0E000000 MOV EAX,E
55078136 74 05       JE SHORT 5507813D
55078138 B8 09000000 MOV EAX,9
5507813D 8B16          MOV EDX,DS:[ESI]
5507813F 50          PUSH EAX
55078140 8B42 08       MOV EAX,DS:[EDX+8]
55078143 6A 00       PUSH 0
55078145 6A 00       PUSH 0
55078147 6A 00       PUSH 0
55078149 6A 00       PUSH 0
5507814B 8BCE          MOV ECX,ESI
5507814D FFD0          CALL EAX
5507814F 8BF8          MOV EDI,EAX
55078151 85FF          TEST EDI,EDI
55078153 75 2F       JNZ SHORT 55078184
55078155 8B16          MOV EDX,DS:[ESI]
55078157 8B52 14       MOV EDX,DS:[EDX+14]
5507815A 8D45 FC       LEA EAX,SS:[EBP-4]
5507815D 50          PUSH EAX
5507815E 8BCE          MOV ECX,ESI
55078160 FFD2          CALL EDX
55078162 85C0          TEST EAX,EAX
55078164 75 07       JNZ SHORT 5507816D
55078166 BF 07090000 MOV EDI,907
5507816B EB 17       JMP SHORT 55078184
5507816D 8B4D 10       MOV ECX,SS:[EBP+10]
55078170 8B10          MOV EDX,DS:[EAX]
55078172 8B52 20       MOV EDX,DS:[EDX+20]
55078175 51          PUSH ECX
55078176 8B4D 0C       MOV ECX,SS:[EBP+C]
55078179 51          PUSH ECX
5507817A 8B4D 08       MOV ECX,SS:[EBP+8]
5507817D 51          PUSH ECX
5507817E 8BC8          MOV ECX,EAX
55078180 FFD2          CALL EDX
55078182 8BF8          MOV EDI,EAX
55078184 8B06          MOV EAX,DS:[ESI]
55078186 8B50 10       MOV EDX,DS:[EAX+10]
55078189 8BCE          MOV ECX,ESI
5507818B FFD2          CALL EDX
5507818D 56          PUSH ESI
5507818E E8 9DBBFFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
55078193 83C4 04       ADD ESP,4
55078196 8BC7          MOV EAX,EDI
55078198 5F          POP EDI
55078199 5E          POP ESI
5507819A 8BE5          MOV ESP,EBP
5507819C 5D          POP EBP
5507819D C3          RETN
5507819E CC          INT3
5507819F CC          INT3
550781A0 55          PUSH EBP
550781A1 8BEC          MOV EBP,ESP
550781A3 83EC 14       SUB ESP,14
550781A6 837D 08 00    CMP DWORD PTR SS:[EBP+8],0
550781AA 75 09       JNZ SHORT 550781B5
550781AC B8 05020000 MOV EAX,205
550781B1 8BE5          MOV ESP,EBP
550781B3 5D          POP EBP
550781B4 C3          RETN
550781B5 53          PUSH EBX
550781B6 33DB          XOR EBX,EBX
550781B8 57          PUSH EDI
550781B9 895D FC       MOV SS:[EBP-4],EBX
550781BC E8 EFBFFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
550781C1 8BF8          MOV EDI,EAX
550781C3 897D F0       MOV SS:[EBP-10],EDI
550781C6 85FF          TEST EDI,EDI
550781C8 75 0C       JNZ SHORT 550781D6
550781CA C745 F8 06090000MOV DWORD PTR SS:[EBP-8],906
550781D1 E9 76010000 JMP 5507834C
550781D6 8B45 0C       MOV EAX,SS:[EBP+C]
550781D9 83E8 00       SUB EAX,0
550781DC 74 08       JE SHORT 550781E6
550781DE 48          DEC EAX
550781DF B8 0E000000 MOV EAX,E
550781E4 74 05       JE SHORT 550781EB
550781E6 B8 09000000 MOV EAX,9
550781EB 8B17          MOV EDX,DS:[EDI]
550781ED 50          PUSH EAX
550781EE 8B42 04       MOV EAX,DS:[EDX+4]
550781F1 6A 00       PUSH 0
550781F3 6A 00       PUSH 0
550781F5 6A 00       PUSH 0
550781F7 6A 00       PUSH 0
550781F9 8BCF          MOV ECX,EDI
550781FB FFD0          CALL EAX
550781FD 8945 F8       MOV SS:[EBP-8],EAX
55078200 85C0          TEST EAX,EAX
55078202 0F85 44010000  JNZ 5507834C
55078208 8B17          MOV EDX,DS:[EDI]
5507820A 8B52 14       MOV EDX,DS:[EDX+14]
5507820D 8D45 EC       LEA EAX,SS:[EBP-14]
55078210 50          PUSH EAX
55078211 8BCF          MOV ECX,EDI
55078213 FFD2          CALL EDX
55078215 8945 F4       MOV SS:[EBP-C],EAX
55078218 85C0          TEST EAX,EAX
5507821A 75 0B       JNZ SHORT 55078227
5507821C 5F          POP EDI
5507821D B8 07090000 MOV EAX,907
55078222 5B          POP EBX
55078223 8BE5          MOV ESP,EBP
55078225 5D          POP EBP
55078226 C3          RETN
55078227 56          PUSH ESI
55078228 EB 09       JMP SHORT 55078233
5507822A 8D9B 00000000  LEA EBX,DS:[EBX]
55078230 8B45 F4       MOV EAX,SS:[EBP-C]
55078233 8B10          MOV EDX,DS:[EAX]
55078235 8BC8          MOV ECX,EAX
55078237 8B42 04       MOV EAX,DS:[EDX+4]
5507823A FFD0          CALL EAX
5507823C 8BF0          MOV ESI,EAX
5507823E 8B16          MOV EDX,DS:[ESI]
55078240 8B02          MOV EAX,DS:[EDX]
55078242 8BCE          MOV ECX,ESI
55078244 FFD0          CALL EAX
55078246 83F8 01       CMP EAX,1
55078249 75 7E       JNZ SHORT 550782C9
5507824B 8B16          MOV EDX,DS:[ESI]
5507824D 8B42 10       MOV EAX,DS:[EDX+10]
55078250 8BCE          MOV ECX,ESI
55078252 FFD0          CALL EAX
55078254 8BF0          MOV ESI,EAX
55078256 8B16          MOV EDX,DS:[ESI]
55078258 8B42 04       MOV EAX,DS:[EDX+4]
5507825B 8BCE          MOV ECX,ESI
5507825D 33DB          XOR EBX,EBX
5507825F FFD0          CALL EAX
55078261 85C0          TEST EAX,EAX
55078263 7E 5D       JLE SHORT 550782C2
55078265 8B16          MOV EDX,DS:[ESI]
55078267 8B42 08       MOV EAX,DS:[EDX+8]
5507826A 53          PUSH EBX
5507826B 8BCE          MOV ECX,ESI
5507826D FFD0          CALL EAX
5507826F 8BF8          MOV EDI,EAX
55078271 8B17          MOV EDX,DS:[EDI]
55078273 8B42 08       MOV EAX,DS:[EDX+8]
55078276 8BCF          MOV ECX,EDI
55078278 FFD0          CALL EAX
5507827A 85C0          TEST EAX,EAX
5507827C 74 2E       JE SHORT 550782AC
5507827E 8BC8          MOV ECX,EAX
55078280 8B45 08       MOV EAX,SS:[EBP+8]
55078283 8A10          MOV DL,DS:[EAX]
55078285 3A11          CMP DL,DS:[ECX]
55078287 75 1A       JNZ SHORT 550782A3
55078289 84D2          TEST DL,DL
5507828B 74 12       JE SHORT 5507829F
5507828D 8A50 01       MOV DL,DS:[EAX+1]
55078290 3A51 01       CMP DL,DS:[ECX+1]
55078293 75 0E       JNZ SHORT 550782A3
55078295 83C0 02       ADD EAX,2
55078298 83C1 02       ADD ECX,2
5507829B 84D2          TEST DL,DL
5507829D 75 E4       JNZ SHORT 55078283
5507829F 33C0          XOR EAX,EAX
550782A1 EB 05       JMP SHORT 550782A8
550782A3 1BC0          SBB EAX,EAX
550782A5 83D8 FF       SBB EAX,-1
550782A8 85C0          TEST EAX,EAX
550782AA 74 10       JE SHORT 550782BC
550782AC 8B16          MOV EDX,DS:[ESI]
550782AE 8B42 04       MOV EAX,DS:[EDX+4]
550782B1 8BCE          MOV ECX,ESI
550782B3 43          INC EBX
550782B4 FFD0          CALL EAX
550782B6 3BD8          CMP EBX,EAX
550782B8 7C AB       JL SHORT 55078265
550782BA EB 03       JMP SHORT 550782BF
550782BC 897D FC       MOV SS:[EBP-4],EDI
550782BF 8B7D F0       MOV EDI,SS:[EBP-10]
550782C2 8B5D FC       MOV EBX,SS:[EBP-4]
550782C5 85DB          TEST EBX,EBX
550782C7 75 25       JNZ SHORT 550782EE
550782C9 8B17          MOV EDX,DS:[EDI]
550782CB 8B45 EC       MOV EAX,SS:[EBP-14]
550782CE 8B52 18       MOV EDX,DS:[EDX+18]
550782D1 50          PUSH EAX
550782D2 8BCF          MOV ECX,EDI
550782D4 FFD2          CALL EDX
550782D6 8945 F4       MOV SS:[EBP-C],EAX
550782D9 85C0          TEST EAX,EAX
550782DB 0F85 4FFFFFFF  JNZ 55078230
550782E1 85DB          TEST EBX,EBX
550782E3 75 09       JNZ SHORT 550782EE
550782E5 C745 F8 05090000MOV DWORD PTR SS:[EBP-8],905
550782EC EB 5D       JMP SHORT 5507834B
550782EE 8B45 0C       MOV EAX,SS:[EBP+C]
550782F1 83F8 04       CMP EAX,4
550782F4 77 55       JA SHORT 5507834B
550782F6 FF2485 68830755JMP DS:[EAX*4+55078368]
550782FD 8B03          MOV EAX,DS:[EBX]
550782FF 8B50 20       MOV EDX,DS:[EAX+20]
55078302 8BCB          MOV ECX,EBX
55078304 FFD2          CALL EDX
55078306 EB 3E       JMP SHORT 55078346
55078308 8B4D F4       MOV ECX,SS:[EBP-C]
5507830B 8B11          MOV EDX,DS:[ECX]
5507830D 8B02          MOV EAX,DS:[EDX]
5507830F 6A 00       PUSH 0
55078311 FFD0          CALL EAX
55078313 8B10          MOV EDX,DS:[EAX]
55078315 8BC8          MOV ECX,EAX
55078317 8B42 18       MOV EAX,DS:[EDX+18]
5507831A FFD0          CALL EAX
5507831C EB 28       JMP SHORT 55078346
5507831E C745 F8 03000000MOV DWORD PTR SS:[EBP-8],3
55078325 EB 24       JMP SHORT 5507834B
55078327 8B13          MOV EDX,DS:[EBX]
55078329 8B42 40       MOV EAX,DS:[EDX+40]
5507832C 8BCB          MOV ECX,EBX
5507832E FFD0          CALL EAX
55078330 8B55 10       MOV EDX,SS:[EBP+10]
55078333 0FB7C8       MOVZX ECX,AX
55078336 890A          MOV DS:[EDX],ECX
55078338 EB 11       JMP SHORT 5507834B
5507833A 8B03          MOV EAX,DS:[EBX]
5507833C 8B50 54       MOV EDX,DS:[EAX+54]
5507833F 8BCB          MOV ECX,EBX
55078341 FFD2          CALL EDX
55078343 0FB7C0       MOVZX EAX,AX
55078346 8B4D 10       MOV ECX,SS:[EBP+10]
55078349 8901          MOV DS:[ECX],EAX
5507834B 5E          POP ESI
5507834C 8B17          MOV EDX,DS:[EDI]
5507834E 8B42 10       MOV EAX,DS:[EDX+10]
55078351 8BCF          MOV ECX,EDI
55078353 FFD0          CALL EAX
55078355 57          PUSH EDI
55078356 E8 D5B9FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
5507835B 8B45 F8       MOV EAX,SS:[EBP-8]
5507835E 83C4 04       ADD ESP,4
55078361 5F          POP EDI
55078362 5B          POP EBX
55078363 8BE5          MOV ESP,EBP
55078365 5D          POP EBP
55078366 C3          RETN
55078367 90          NOP
55078368 0883 0755FD82  OR DS:[EBX+82FD5507],AL
5507836E 07          POP ES
5507836F 55          PUSH EBP
55078370 1E          PUSH DS
55078371 8307 55       ADD DWORD PTR DS:[EDI],55
55078374 27          DAA
55078375 8307 55       ADD DWORD PTR DS:[EDI],55
55078378 3A83 0755CCCC  CMP AL,DS:[EBX+CCCC5507]
5507837E CC          INT3
5507837F CC          INT3
55078380 55          PUSH EBP
55078381 8BEC          MOV EBP,ESP
55078383 51          PUSH ECX
55078384 56          PUSH ESI
55078385 57          PUSH EDI
55078386 E8 25BEFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507838B 8BF0          MOV ESI,EAX
5507838D 85F6          TEST ESI,ESI
5507838F 75 07       JNZ SHORT 55078398
55078391 BF 06090000 MOV EDI,906
55078396 EB 74       JMP SHORT 5507840C
55078398 8B45 0C       MOV EAX,SS:[EBP+C]
5507839B 83E8 00       SUB EAX,0
5507839E 74 08       JE SHORT 550783A8
550783A0 48          DEC EAX
550783A1 B8 0E000000 MOV EAX,E
550783A6 74 05       JE SHORT 550783AD
550783A8 B8 09000000 MOV EAX,9
550783AD 8B16          MOV EDX,DS:[ESI]
550783AF 50          PUSH EAX
550783B0 8B42 08       MOV EAX,DS:[EDX+8]
550783B3 6A 00       PUSH 0
550783B5 6A 00       PUSH 0
550783B7 6A 00       PUSH 0
550783B9 6A 00       PUSH 0
550783BB 8BCE          MOV ECX,ESI
550783BD FFD0          CALL EAX
550783BF 8BF8          MOV EDI,EAX
550783C1 85FF          TEST EDI,EDI
550783C3 75 47       JNZ SHORT 5507840C
550783C5 8B16          MOV EDX,DS:[ESI]
550783C7 8B52 14       MOV EDX,DS:[EDX+14]
550783CA 8D45 FC       LEA EAX,SS:[EBP-4]
550783CD 50          PUSH EAX
550783CE 8BCE          MOV ECX,ESI
550783D0 FFD2          CALL EDX
550783D2 8BF8          MOV EDI,EAX
550783D4 85FF          TEST EDI,EDI
550783D6 75 07       JNZ SHORT 550783DF
550783D8 BF 07090000 MOV EDI,907
550783DD EB 2D       JMP SHORT 5507840C
550783DF 8B07          MOV EAX,DS:[EDI]
550783E1 8B10          MOV EDX,DS:[EAX]
550783E3 6A 00       PUSH 0
550783E5 8BCF          MOV ECX,EDI
550783E7 FFD2          CALL EDX
550783E9 8B10          MOV EDX,DS:[EAX]
550783EB 8BC8          MOV ECX,EAX
550783ED 8B42 24       MOV EAX,DS:[EDX+24]
550783F0 FFD0          CALL EAX
550783F2 84C0          TEST AL,AL
550783F4 74 11       JE SHORT 55078407
550783F6 8B17          MOV EDX,DS:[EDI]
550783F8 8B45 08       MOV EAX,SS:[EBP+8]
550783FB 8B52 10       MOV EDX,DS:[EDX+10]
550783FE 50          PUSH EAX
550783FF 8BCF          MOV ECX,EDI
55078401 FFD2          CALL EDX
55078403 8BF8          MOV EDI,EAX
55078405 EB 05       JMP SHORT 5507840C
55078407 BF 03000000 MOV EDI,3
5507840C 8B06          MOV EAX,DS:[ESI]
5507840E 8B50 10       MOV EDX,DS:[EAX+10]
55078411 8BCE          MOV ECX,ESI
55078413 FFD2          CALL EDX
55078415 56          PUSH ESI
55078416 E8 15B9FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
5507841B 83C4 04       ADD ESP,4
5507841E 8BC7          MOV EAX,EDI
55078420 5F          POP EDI
55078421 5E          POP ESI
55078422 8BE5          MOV ESP,EBP
55078424 5D          POP EBP
55078425 C3          RETN
55078426 CC          INT3
55078427 CC          INT3
55078428 CC          INT3
55078429 CC          INT3
5507842A CC          INT3
5507842B CC          INT3
5507842C CC          INT3
5507842D CC          INT3
5507842E CC          INT3
5507842F CC          INT3
55078430 55          PUSH EBP
55078431 8BEC          MOV EBP,ESP
55078433 53          PUSH EBX
55078434 8B5D 08       MOV EBX,SS:[EBP+8]
55078437 85DB          TEST EBX,EBX
55078439 75 08       JNZ SHORT 55078443
5507843B B8 05020000 MOV EAX,205
55078440 5B          POP EBX
55078441 5D          POP EBP
55078442 C3          RETN
55078443 56          PUSH ESI
55078444 57          PUSH EDI
55078445 E8 66BDFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507844A 8BF0          MOV ESI,EAX
5507844C 85F6          TEST ESI,ESI
5507844E 75 07       JNZ SHORT 55078457
55078450 BF 06090000 MOV EDI,906
55078455 EB 5A       JMP SHORT 550784B1
55078457 8B45 0C       MOV EAX,SS:[EBP+C]
5507845A 83E8 00       SUB EAX,0
5507845D 74 08       JE SHORT 55078467
5507845F 48          DEC EAX
55078460 B8 0E000000 MOV EAX,E
55078465 74 05       JE SHORT 5507846C
55078467 B8 09000000 MOV EAX,9
5507846C 8B16          MOV EDX,DS:[ESI]
5507846E 50          PUSH EAX
5507846F 8B42 08       MOV EAX,DS:[EDX+8]
55078472 6A 00       PUSH 0
55078474 6A 00       PUSH 0
55078476 6A 00       PUSH 0
55078478 6A 00       PUSH 0
5507847A 8BCE          MOV ECX,ESI
5507847C FFD0          CALL EAX
5507847E 8BF8          MOV EDI,EAX
55078480 85FF          TEST EDI,EDI
55078482 75 2D       JNZ SHORT 550784B1
55078484 8B16          MOV EDX,DS:[ESI]
55078486 8B52 14       MOV EDX,DS:[EDX+14]
55078489 8D45 08       LEA EAX,SS:[EBP+8]
5507848C 50          PUSH EAX
5507848D 8BCE          MOV ECX,ESI
5507848F FFD2          CALL EDX
55078491 85C0          TEST EAX,EAX
55078493 75 07       JNZ SHORT 5507849C
55078495 BF 07090000 MOV EDI,907
5507849A EB 15       JMP SHORT 550784B1
5507849C 8B10          MOV EDX,DS:[EAX]
5507849E 8BC8          MOV ECX,EAX
550784A0 8B02          MOV EAX,DS:[EDX]
550784A2 6A 00       PUSH 0
550784A4 FFD0          CALL EAX
550784A6 8B10          MOV EDX,DS:[EAX]
550784A8 8BC8          MOV ECX,EAX
550784AA 8B42 18       MOV EAX,DS:[EDX+18]
550784AD FFD0          CALL EAX
550784AF 8903          MOV DS:[EBX],EAX
550784B1 8B16          MOV EDX,DS:[ESI]
550784B3 8B42 10       MOV EAX,DS:[EDX+10]
550784B6 8BCE          MOV ECX,ESI
550784B8 FFD0          CALL EAX
550784BA 56          PUSH ESI
550784BB E8 70B8FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
550784C0 83C4 04       ADD ESP,4
550784C3 8BC7          MOV EAX,EDI
550784C5 5F          POP EDI
550784C6 5E          POP ESI
550784C7 5B          POP EBX
550784C8 5D          POP EBP
550784C9 C3          RETN
550784CA CC          INT3
550784CB CC          INT3
550784CC CC          INT3
550784CD CC          INT3
550784CE CC          INT3
550784CF CC          INT3
550784D0 55          PUSH EBP
550784D1 8BEC          MOV EBP,ESP
550784D3 53          PUSH EBX
550784D4 8B5D 08       MOV EBX,SS:[EBP+8]
550784D7 85DB          TEST EBX,EBX
550784D9 75 08       JNZ SHORT 550784E3
550784DB B8 05020000 MOV EAX,205
550784E0 5B          POP EBX
550784E1 5D          POP EBP
550784E2 C3          RETN
550784E3 56          PUSH ESI
550784E4 57          PUSH EDI
550784E5 E8 C6BCFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
550784EA 8BF0          MOV ESI,EAX
550784EC 85F6          TEST ESI,ESI
550784EE 75 07       JNZ SHORT 550784F7
550784F0 BF 06090000 MOV EDI,906
550784F5 EB 5A       JMP SHORT 55078551
550784F7 8B45 0C       MOV EAX,SS:[EBP+C]
550784FA 83E8 00       SUB EAX,0
550784FD 74 08       JE SHORT 55078507
550784FF 48          DEC EAX
55078500 B8 0E000000 MOV EAX,E
55078505 74 05       JE SHORT 5507850C
55078507 B8 09000000 MOV EAX,9
5507850C 8B16          MOV EDX,DS:[ESI]
5507850E 50          PUSH EAX
5507850F 8B42 08       MOV EAX,DS:[EDX+8]
55078512 6A 00       PUSH 0
55078514 6A 00       PUSH 0
55078516 6A 00       PUSH 0
55078518 6A 00       PUSH 0
5507851A 8BCE          MOV ECX,ESI
5507851C FFD0          CALL EAX
5507851E 8BF8          MOV EDI,EAX
55078520 85FF          TEST EDI,EDI
55078522 75 2D       JNZ SHORT 55078551
55078524 8B16          MOV EDX,DS:[ESI]
55078526 8B52 14       MOV EDX,DS:[EDX+14]
55078529 8D45 08       LEA EAX,SS:[EBP+8]
5507852C 50          PUSH EAX
5507852D 8BCE          MOV ECX,ESI
5507852F FFD2          CALL EDX
55078531 85C0          TEST EAX,EAX
55078533 75 07       JNZ SHORT 5507853C
55078535 BF 07090000 MOV EDI,907
5507853A EB 15       JMP SHORT 55078551
5507853C 8B10          MOV EDX,DS:[EAX]
5507853E 8BC8          MOV ECX,EAX
55078540 8B02          MOV EAX,DS:[EDX]
55078542 6A 00       PUSH 0
55078544 FFD0          CALL EAX
55078546 8B10          MOV EDX,DS:[EAX]
55078548 8BC8          MOV ECX,EAX
5507854A 8B42 1C       MOV EAX,DS:[EDX+1C]
5507854D FFD0          CALL EAX
5507854F 8903          MOV DS:[EBX],EAX
55078551 8B16          MOV EDX,DS:[ESI]
55078553 8B42 10       MOV EAX,DS:[EDX+10]
55078556 8BCE          MOV ECX,ESI
55078558 FFD0          CALL EAX
5507855A 56          PUSH ESI
5507855B E8 D0B7FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
55078560 83C4 04       ADD ESP,4
55078563 8BC7          MOV EAX,EDI
55078565 5F          POP EDI
55078566 5E          POP ESI
55078567 5B          POP EBX
55078568 5D          POP EBP
55078569 C3          RETN
5507856A CC          INT3
5507856B CC          INT3
5507856C 55          PUSH EBP
5507856D 8BEC          MOV EBP,ESP
5507856F 53          PUSH EBX
55078570 56          PUSH ESI
55078571 57          PUSH EDI
55078572 8B45 08       MOV EAX,SS:[EBP+8]
55078575 C740 04 00000000MOV DWORD PTR DS:[EAX+4],0
5507857C 8B45 08       MOV EAX,SS:[EBP+8]
5507857F 8B40 04       MOV EAX,DS:[EAX+4]
55078582 8B4D 08       MOV ECX,SS:[EBP+8]
55078585 8901          MOV DS:[ECX],EAX
55078587 8B45 08       MOV EAX,SS:[EBP+8]
5507858A C740 08 01234567MOV DWORD PTR DS:[EAX+8],67452301
55078591 8B45 08       MOV EAX,SS:[EBP+8]
55078594 C740 0C 89ABCDEFMOV DWORD PTR DS:[EAX+C],EFCDAB89
5507859B 8B45 08       MOV EAX,SS:[EBP+8]
5507859E C740 10 FEDCBA98MOV DWORD PTR DS:[EAX+10],98BADCFE
550785A5 8B45 08       MOV EAX,SS:[EBP+8]
550785A8 C740 14 76543210MOV DWORD PTR DS:[EAX+14],10325476
550785AF EB 00       JMP SHORT 550785B1
550785B1 5F          POP EDI
550785B2 5E          POP ESI
550785B3 5B          POP EBX
550785B4 C9          LEAVE
550785B5 C3          RETN
550785B6 55          PUSH EBP
550785B7 8BEC          MOV EBP,ESP
550785B9 83EC 50       SUB ESP,50
550785BC 53          PUSH EBX
550785BD 56          PUSH ESI
550785BE 57          PUSH EDI
550785BF 8B45 08       MOV EAX,SS:[EBP+8]
550785C2 8B00          MOV EAX,DS:[EAX]
550785C4 C1E8 03       SHR EAX,3
550785C7 83E0 3F       AND EAX,3F
550785CA 8945 B4       MOV SS:[EBP-4C],EAX
550785CD 8B45 08       MOV EAX,SS:[EBP+8]
550785D0 8B00          MOV EAX,DS:[EAX]
550785D2 8B4D 10       MOV ECX,SS:[EBP+10]
550785D5 8D04C8       LEA EAX,DS:[EAX+ECX*8]
550785D8 8B4D 08       MOV ECX,SS:[EBP+8]
550785DB 3B01          CMP EAX,DS:[ECX]
550785DD 73 06       JNB SHORT 550785E5
550785DF 8B45 08       MOV EAX,SS:[EBP+8]
550785E2 FF40 04       INC DWORD PTR DS:[EAX+4]
550785E5 8B45 10       MOV EAX,SS:[EBP+10]
550785E8 C1E0 03       SHL EAX,3
550785EB 8B4D 08       MOV ECX,SS:[EBP+8]
550785EE 0101          ADD DS:[ECX],EAX
550785F0 8B45 10       MOV EAX,SS:[EBP+10]
550785F3 C1E8 1D       SHR EAX,1D
550785F6 8B4D 08       MOV ECX,SS:[EBP+8]
550785F9 0141 04       ADD DS:[ECX+4],EAX
550785FC 837D B4 00    CMP DWORD PTR SS:[EBP-4C],0
55078600 75 29       JNZ SHORT 5507862B
55078602 F645 0C 03    TEST BYTE PTR SS:[EBP+C],3
55078606 75 23       JNZ SHORT 5507862B
55078608 837D 10 40    CMP DWORD PTR SS:[EBP+10],40
5507860C 72 1D       JB SHORT 5507862B
5507860E 8B45 0C       MOV EAX,SS:[EBP+C]
55078611 50          PUSH EAX
55078612 8B45 08       MOV EAX,SS:[EBP+8]
55078615 83C0 08       ADD EAX,8
55078618 50          PUSH EAX
55078619 E8 37020000 CALL 55078855
5507861E 83C4 08       ADD ESP,8
55078621 836D 10 40    SUB DWORD PTR SS:[EBP+10],40
55078625 8345 0C 40    ADD DWORD PTR SS:[EBP+C],40
55078629 EB DD       JMP SHORT 55078608
5507862B 8B45 10       MOV EAX,SS:[EBP+10]
5507862E 8945 B0       MOV SS:[EBP-50],EAX
55078631 FF4D 10       DEC DWORD PTR SS:[EBP+10]
55078634 837D B0 00    CMP DWORD PTR SS:[EBP-50],0
55078638 0F84 B2000000  JE 550786F0
5507863E 8B45 0C       MOV EAX,SS:[EBP+C]
55078641 8A00          MOV AL,DS:[EAX]
55078643 8B4D B4       MOV ECX,SS:[EBP-4C]
55078646 8B55 08       MOV EDX,SS:[EBP+8]
55078649 88440A 18    MOV DS:[EDX+ECX+18],AL
5507864D FF45 0C       INC DWORD PTR SS:[EBP+C]
55078650 FF45 B4       INC DWORD PTR SS:[EBP-4C]
55078653 837D B4 40    CMP DWORD PTR SS:[EBP-4C],40
55078657 0F85 8E000000  JNZ 550786EB
5507865D C745 BC 00000000MOV DWORD PTR SS:[EBP-44],0
55078664 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
5507866B EB 07       JMP SHORT 55078674
5507866D FF45 BC       INC DWORD PTR SS:[EBP-44]
55078670 8345 B8 04    ADD DWORD PTR SS:[EBP-48],4
55078674 837D BC 10    CMP DWORD PTR SS:[EBP-44],10
55078678 73 57       JNB SHORT 550786D1
5507867A 8B45 B8       MOV EAX,SS:[EBP-48]
5507867D 8B4D 08       MOV ECX,SS:[EBP+8]
55078680 8A4401 19    MOV AL,DS:[ECX+EAX+19]
55078684 25 FF000000 AND EAX,FF
55078689 C1E0 08       SHL EAX,8
5507868C 8B4D B8       MOV ECX,SS:[EBP-48]
5507868F 8B55 08       MOV EDX,SS:[EBP+8]
55078692 8A4C0A 1B    MOV CL,DS:[EDX+ECX+1B]
55078696 81E1 FF000000  AND ECX,FF
5507869C C1E1 18       SHL ECX,18
5507869F 0BC1          OR EAX,ECX
550786A1 8B4D B8       MOV ECX,SS:[EBP-48]
550786A4 8B55 08       MOV EDX,SS:[EBP+8]
550786A7 8A4C0A 1A    MOV CL,DS:[EDX+ECX+1A]
550786AB 81E1 FF000000  AND ECX,FF
550786B1 C1E1 10       SHL ECX,10
550786B4 0BC1          OR EAX,ECX
550786B6 8B4D B8       MOV ECX,SS:[EBP-48]
550786B9 8B55 08       MOV EDX,SS:[EBP+8]
550786BC 8A4C0A 18    MOV CL,DS:[EDX+ECX+18]
550786C0 81E1 FF000000  AND ECX,FF
550786C6 0BC1          OR EAX,ECX
550786C8 8B4D BC       MOV ECX,SS:[EBP-44]
550786CB 89448D C0    MOV SS:[EBP+ECX*4-40],EAX
550786CF EB 9C       JMP SHORT 5507866D
550786D1 8D45 C0       LEA EAX,SS:[EBP-40]
550786D4 50          PUSH EAX
550786D5 8B45 08       MOV EAX,SS:[EBP+8]
550786D8 83C0 08       ADD EAX,8
550786DB 50          PUSH EAX
550786DC E8 74010000 CALL 55078855
550786E1 83C4 08       ADD ESP,8
550786E4 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
550786EB E9 3BFFFFFF JMP 5507862B
550786F0 EB 00       JMP SHORT 550786F2
550786F2 5F          POP EDI
550786F3 5E          POP ESI
550786F4 5B          POP EBX
550786F5 C9          LEAVE
550786F6 C3          RETN
550786F7 55          PUSH EBP
550786F8 8BEC          MOV EBP,ESP
550786FA 83EC 50       SUB ESP,50
550786FD 53          PUSH EBX
550786FE 56          PUSH ESI
550786FF 57          PUSH EDI
55078700 8B45 08       MOV EAX,SS:[EBP+8]
55078703 8B00          MOV EAX,DS:[EAX]
55078705 8945 F8       MOV SS:[EBP-8],EAX
55078708 8B45 08       MOV EAX,SS:[EBP+8]
5507870B 8B40 04       MOV EAX,DS:[EAX+4]
5507870E 8945 FC       MOV SS:[EBP-4],EAX
55078711 8B45 08       MOV EAX,SS:[EBP+8]
55078714 8B00          MOV EAX,DS:[EAX]
55078716 C1E8 03       SHR EAX,3
55078719 83E0 3F       AND EAX,3F
5507871C 8945 B0       MOV SS:[EBP-50],EAX
5507871F 837D B0 38    CMP DWORD PTR SS:[EBP-50],38
55078723 7C 0D       JL SHORT 55078732
55078725 B8 78000000 MOV EAX,78
5507872A 2B45 B0       SUB EAX,SS:[EBP-50]
5507872D 8945 BC       MOV SS:[EBP-44],EAX
55078730 EB 0B       JMP SHORT 5507873D
55078732 B8 38000000 MOV EAX,38
55078737 2B45 B0       SUB EAX,SS:[EBP-50]
5507873A 8945 BC       MOV SS:[EBP-44],EAX
5507873D 8B45 BC       MOV EAX,SS:[EBP-44]
55078740 50          PUSH EAX
55078741 68 68501A55 PUSH 551A5068
55078746 8B45 08       MOV EAX,SS:[EBP+8]
55078749 50          PUSH EAX
5507874A E8 67FEFFFF CALL 550785B6
5507874F 83C4 0C       ADD ESP,C
55078752 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
55078759 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
55078760 EB 07       JMP SHORT 55078769
55078762 FF45 B8       INC DWORD PTR SS:[EBP-48]
55078765 8345 B4 04    ADD DWORD PTR SS:[EBP-4C],4
55078769 837D B8 0E    CMP DWORD PTR SS:[EBP-48],E
5507876D 73 57       JNB SHORT 550787C6
5507876F 8B45 B4       MOV EAX,SS:[EBP-4C]
55078772 8B4D 08       MOV ECX,SS:[EBP+8]
55078775 8A4401 1A    MOV AL,DS:[ECX+EAX+1A]
55078779 25 FF000000 AND EAX,FF
5507877E C1E0 10       SHL EAX,10
55078781 8B4D B4       MOV ECX,SS:[EBP-4C]
55078784 8B55 08       MOV EDX,SS:[EBP+8]
55078787 8A4C0A 1B    MOV CL,DS:[EDX+ECX+1B]
5507878B 81E1 FF000000  AND ECX,FF
55078791 C1E1 18       SHL ECX,18
55078794 0BC1          OR EAX,ECX
55078796 8B4D B4       MOV ECX,SS:[EBP-4C]
55078799 8B55 08       MOV EDX,SS:[EBP+8]
5507879C 8A4C0A 19    MOV CL,DS:[EDX+ECX+19]
550787A0 81E1 FF000000  AND ECX,FF
550787A6 C1E1 08       SHL ECX,8
550787A9 0BC1          OR EAX,ECX
550787AB 8B4D B4       MOV ECX,SS:[EBP-4C]
550787AE 8B55 08       MOV EDX,SS:[EBP+8]
550787B1 8A4C0A 18    MOV CL,DS:[EDX+ECX+18]
550787B5 81E1 FF000000  AND ECX,FF
550787BB 0BC1          OR EAX,ECX
550787BD 8B4D B8       MOV ECX,SS:[EBP-48]
550787C0 89448D C0    MOV SS:[EBP+ECX*4-40],EAX
550787C4 EB 9C       JMP SHORT 55078762
550787C6 8D45 C0       LEA EAX,SS:[EBP-40]
550787C9 50          PUSH EAX
550787CA 8B45 08       MOV EAX,SS:[EBP+8]
550787CD 83C0 08       ADD EAX,8
550787D0 50          PUSH EAX
550787D1 E8 7F000000 CALL 55078855
550787D6 83C4 08       ADD ESP,8
550787D9 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
550787E0 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
550787E7 EB 07       JMP SHORT 550787F0
550787E9 FF45 B8       INC DWORD PTR SS:[EBP-48]
550787EC 8345 B4 04    ADD DWORD PTR SS:[EBP-4C],4
550787F0 837D B8 04    CMP DWORD PTR SS:[EBP-48],4
550787F4 73 58       JNB SHORT 5507884E
550787F6 8B45 B8       MOV EAX,SS:[EBP-48]
550787F9 8B4D 08       MOV ECX,SS:[EBP+8]
550787FC 8A4481 08    MOV AL,DS:[ECX+EAX*4+8]
55078800 8B4D B4       MOV ECX,SS:[EBP-4C]
55078803 8B55 08       MOV EDX,SS:[EBP+8]
55078806 88440A 58    MOV DS:[EDX+ECX+58],AL
5507880A 8B45 B8       MOV EAX,SS:[EBP-48]
5507880D 8B4D 08       MOV ECX,SS:[EBP+8]
55078810 8B4481 08    MOV EAX,DS:[ECX+EAX*4+8]
55078814 8B4D B4       MOV ECX,SS:[EBP-4C]
55078817 8B55 08       MOV EDX,SS:[EBP+8]
5507881A 88640A 59    MOV DS:[EDX+ECX+59],AH
5507881E 8B45 B8       MOV EAX,SS:[EBP-48]
55078821 8B4D 08       MOV ECX,SS:[EBP+8]
55078824 8B4481 08    MOV EAX,DS:[ECX+EAX*4+8]
55078828 C1E8 10       SHR EAX,10
5507882B 8B4D B4       MOV ECX,SS:[EBP-4C]
5507882E 8B55 08       MOV EDX,SS:[EBP+8]
55078831 88440A 5A    MOV DS:[EDX+ECX+5A],AL
55078835 8B45 B8       MOV EAX,SS:[EBP-48]
55078838 8B4D 08       MOV ECX,SS:[EBP+8]
5507883B 8B4481 08    MOV EAX,DS:[ECX+EAX*4+8]
5507883F C1E8 18       SHR EAX,18
55078842 8B4D B4       MOV ECX,SS:[EBP-4C]
55078845 8B55 08       MOV EDX,SS:[EBP+8]
55078848 88440A 5B    MOV DS:[EDX+ECX+5B],AL
5507884C EB 9B       JMP SHORT 550787E9
5507884E EB 00       JMP SHORT 55078850
55078850 5F          POP EDI
55078851 5E          POP ESI
55078852 5B          POP EBX
55078853 C9          LEAVE
55078854 C3          RETN
55078855 55          PUSH EBP
55078856 8BEC          MOV EBP,ESP
55078858 83EC 10       SUB ESP,10
5507885B 53          PUSH EBX
5507885C 56          PUSH ESI
5507885D 57          PUSH EDI
5507885E 8B45 08       MOV EAX,SS:[EBP+8]
55078861 8B00          MOV EAX,DS:[EAX]
55078863 8945 FC       MOV SS:[EBP-4],EAX
55078866 8B45 08       MOV EAX,SS:[EBP+8]
55078869 8B40 04       MOV EAX,DS:[EAX+4]
5507886C 8945 F8       MOV SS:[EBP-8],EAX
5507886F 8B45 08       MOV EAX,SS:[EBP+8]
55078872 8B40 08       MOV EAX,DS:[EAX+8]
55078875 8945 F4       MOV SS:[EBP-C],EAX
55078878 8B45 08       MOV EAX,SS:[EBP+8]
5507887B 8B40 0C       MOV EAX,DS:[EAX+C]
5507887E 8945 F0       MOV SS:[EBP-10],EAX
55078881 8B45 F8       MOV EAX,SS:[EBP-8]
55078884 F7D0          NOT EAX
55078886 2345 F0       AND EAX,SS:[EBP-10]
55078889 8B4D F4       MOV ECX,SS:[EBP-C]
5507888C 234D F8       AND ECX,SS:[EBP-8]
5507888F 0BC1          OR EAX,ECX
55078891 8B4D 0C       MOV ECX,SS:[EBP+C]
55078894 0301          ADD EAX,DS:[ECX]
55078896 2D 885B9528 SUB EAX,28955B88
5507889B 0145 FC       ADD SS:[EBP-4],EAX
5507889E 8B45 FC       MOV EAX,SS:[EBP-4]
550788A1 C1E0 07       SHL EAX,7
550788A4 8B4D FC       MOV ECX,SS:[EBP-4]
550788A7 C1E9 19       SHR ECX,19
550788AA 0BC1          OR EAX,ECX
550788AC 8945 FC       MOV SS:[EBP-4],EAX
550788AF 8B45 F8       MOV EAX,SS:[EBP-8]
550788B2 0145 FC       ADD SS:[EBP-4],EAX
550788B5 8B45 FC       MOV EAX,SS:[EBP-4]
550788B8 F7D0          NOT EAX
550788BA 2345 F4       AND EAX,SS:[EBP-C]
550788BD 8B4D F8       MOV ECX,SS:[EBP-8]
550788C0 234D FC       AND ECX,SS:[EBP-4]
550788C3 0BC1          OR EAX,ECX
550788C5 8B4D 0C       MOV ECX,SS:[EBP+C]
550788C8 0341 04       ADD EAX,DS:[ECX+4]
550788CB 2D AA483817 SUB EAX,173848AA
550788D0 0145 F0       ADD SS:[EBP-10],EAX
550788D3 8B45 F0       MOV EAX,SS:[EBP-10]
550788D6 C1E0 0C       SHL EAX,C
550788D9 8B4D F0       MOV ECX,SS:[EBP-10]
550788DC C1E9 14       SHR ECX,14
550788DF 0BC1          OR EAX,ECX
550788E1 8945 F0       MOV SS:[EBP-10],EAX
550788E4 8B45 FC       MOV EAX,SS:[EBP-4]
550788E7 0145 F0       ADD SS:[EBP-10],EAX
550788EA 8B45 F0       MOV EAX,SS:[EBP-10]
550788ED F7D0          NOT EAX
550788EF 2345 F8       AND EAX,SS:[EBP-8]
550788F2 8B4D FC       MOV ECX,SS:[EBP-4]
550788F5 234D F0       AND ECX,SS:[EBP-10]
550788F8 0BC1          OR EAX,ECX
550788FA 8B4D 0C       MOV ECX,SS:[EBP+C]
550788FD 0341 08       ADD EAX,DS:[ECX+8]
55078900 05 DB702024 ADD EAX,242070DB
55078905 0145 F4       ADD SS:[EBP-C],EAX
55078908 8B45 F4       MOV EAX,SS:[EBP-C]
5507890B C1E0 11       SHL EAX,11
5507890E 8B4D F4       MOV ECX,SS:[EBP-C]
55078911 C1E9 0F       SHR ECX,F
55078914 0BC1          OR EAX,ECX
55078916 8945 F4       MOV SS:[EBP-C],EAX
55078919 8B45 F0       MOV EAX,SS:[EBP-10]
5507891C 0145 F4       ADD SS:[EBP-C],EAX
5507891F 8B45 F4       MOV EAX,SS:[EBP-C]
55078922 F7D0          NOT EAX
55078924 2345 FC       AND EAX,SS:[EBP-4]
55078927 8B4D F4       MOV ECX,SS:[EBP-C]
5507892A 234D F0       AND ECX,SS:[EBP-10]
5507892D 0BC1          OR EAX,ECX
5507892F 8B4D 0C       MOV ECX,SS:[EBP+C]
55078932 0341 0C       ADD EAX,DS:[ECX+C]
55078935 2D 1231423E SUB EAX,3E423112
5507893A 0145 F8       ADD SS:[EBP-8],EAX
5507893D 8B45 F8       MOV EAX,SS:[EBP-8]
55078940 C1E8 0A       SHR EAX,A
55078943 8B4D F8       MOV ECX,SS:[EBP-8]
55078946 C1E1 16       SHL ECX,16
55078949 0BC1          OR EAX,ECX
5507894B 8945 F8       MOV SS:[EBP-8],EAX
5507894E 8B45 F4       MOV EAX,SS:[EBP-C]
55078951 0145 F8       ADD SS:[EBP-8],EAX
55078954 8B45 F8       MOV EAX,SS:[EBP-8]
55078957 F7D0          NOT EAX
55078959 2345 F0       AND EAX,SS:[EBP-10]
5507895C 8B4D F4       MOV ECX,SS:[EBP-C]
5507895F 234D F8       AND ECX,SS:[EBP-8]
55078962 0BC1          OR EAX,ECX
55078964 8B4D 0C       MOV ECX,SS:[EBP+C]
55078967 0341 10       ADD EAX,DS:[ECX+10]
5507896A 2D 51F0830A SUB EAX,A83F051
5507896F 0145 FC       ADD SS:[EBP-4],EAX
55078972 8B45 FC       MOV EAX,SS:[EBP-4]
55078975 C1E0 07       SHL EAX,7
55078978 8B4D FC       MOV ECX,SS:[EBP-4]
5507897B C1E9 19       SHR ECX,19
5507897E 0BC1          OR EAX,ECX
55078980 8945 FC       MOV SS:[EBP-4],EAX
55078983 8B45 F8       MOV EAX,SS:[EBP-8]
55078986 0145 FC       ADD SS:[EBP-4],EAX
55078989 8B45 FC       MOV EAX,SS:[EBP-4]
5507898C F7D0          NOT EAX
5507898E 2345 F4       AND EAX,SS:[EBP-C]
55078991 8B4D F8       MOV ECX,SS:[EBP-8]
55078994 234D FC       AND ECX,SS:[EBP-4]
55078997 0BC1          OR EAX,ECX
55078999 8B4D 0C       MOV ECX,SS:[EBP+C]
5507899C 0341 14       ADD EAX,DS:[ECX+14]
5507899F 05 2AC68747 ADD EAX,4787C62A
550789A4 0145 F0       ADD SS:[EBP-10],EAX
550789A7 8B45 F0       MOV EAX,SS:[EBP-10]
550789AA C1E0 0C       SHL EAX,C
550789AD 8B4D F0       MOV ECX,SS:[EBP-10]
550789B0 C1E9 14       SHR ECX,14
550789B3 0BC1          OR EAX,ECX
550789B5 8945 F0       MOV SS:[EBP-10],EAX
550789B8 8B45 FC       MOV EAX,SS:[EBP-4]
550789BB 0145 F0       ADD SS:[EBP-10],EAX
550789BE 8B45 F0       MOV EAX,SS:[EBP-10]
550789C1 F7D0          NOT EAX
550789C3 2345 F8       AND EAX,SS:[EBP-8]
550789C6 8B4D FC       MOV ECX,SS:[EBP-4]
550789C9 234D F0       AND ECX,SS:[EBP-10]
550789CC 0BC1          OR EAX,ECX
550789CE 8B4D 0C       MOV ECX,SS:[EBP+C]
550789D1 0341 18       ADD EAX,DS:[ECX+18]
550789D4 2D EDB9CF57 SUB EAX,57CFB9ED
550789D9 0145 F4       ADD SS:[EBP-C],EAX
550789DC 8B45 F4       MOV EAX,SS:[EBP-C]
550789DF C1E0 11       SHL EAX,11
550789E2 8B4D F4       MOV ECX,SS:[EBP-C]
550789E5 C1E9 0F       SHR ECX,F
550789E8 0BC1          OR EAX,ECX
550789EA 8945 F4       MOV SS:[EBP-C],EAX
550789ED 8B45 F0       MOV EAX,SS:[EBP-10]
550789F0 0145 F4       ADD SS:[EBP-C],EAX
550789F3 8B45 F4       MOV EAX,SS:[EBP-C]
550789F6 F7D0          NOT EAX
550789F8 2345 FC       AND EAX,SS:[EBP-4]
550789FB 8B4D F4       MOV ECX,SS:[EBP-C]
550789FE 234D F0       AND ECX,SS:[EBP-10]
55078A01 0BC1          OR EAX,ECX
55078A03 8B4D 0C       MOV ECX,SS:[EBP+C]
55078A06 0341 1C       ADD EAX,DS:[ECX+1C]
55078A09 2D FF6AB902 SUB EAX,2B96AFF
55078A0E 0145 F8       ADD SS:[EBP-8],EAX
55078A11 8B45 F8       MOV EAX,SS:[EBP-8]
55078A14 C1E8 0A       SHR EAX,A
55078A17 8B4D F8       MOV ECX,SS:[EBP-8]
55078A1A C1E1 16       SHL ECX,16
55078A1D 0BC1          OR EAX,ECX
55078A1F 8945 F8       MOV SS:[EBP-8],EAX
55078A22 8B45 F4       MOV EAX,SS:[EBP-C]
55078A25 0145 F8       ADD SS:[EBP-8],EAX
55078A28 8B45 F8       MOV EAX,SS:[EBP-8]
55078A2B F7D0          NOT EAX
55078A2D 2345 F0       AND EAX,SS:[EBP-10]
55078A30 8B4D F4       MOV ECX,SS:[EBP-C]
55078A33 234D F8       AND ECX,SS:[EBP-8]
55078A36 0BC1          OR EAX,ECX
55078A38 8B4D 0C       MOV ECX,SS:[EBP+C]
55078A3B 0341 20       ADD EAX,DS:[ECX+20]
55078A3E 05 D8988069 ADD EAX,698098D8
55078A43 0145 FC       ADD SS:[EBP-4],EAX
55078A46 8B45 FC       MOV EAX,SS:[EBP-4]
55078A49 C1E0 07       SHL EAX,7
55078A4C 8B4D FC       MOV ECX,SS:[EBP-4]
55078A4F C1E9 19       SHR ECX,19
55078A52 0BC1          OR EAX,ECX
55078A54 8945 FC       MOV SS:[EBP-4],EAX
55078A57 8B45 F8       MOV EAX,SS:[EBP-8]
55078A5A 0145 FC       ADD SS:[EBP-4],EAX
55078A5D 8B45 FC       MOV EAX,SS:[EBP-4]
55078A60 F7D0          NOT EAX
55078A62 2345 F4       AND EAX,SS:[EBP-C]
55078A65 8B4D F8       MOV ECX,SS:[EBP-8]
55078A68 234D FC       AND ECX,SS:[EBP-4]
55078A6B 0BC1          OR EAX,ECX
55078A6D 8B4D 0C       MOV ECX,SS:[EBP+C]
55078A70 0341 24       ADD EAX,DS:[ECX+24]
55078A73 2D 5108BB74 SUB EAX,74BB0851
55078A78 0145 F0       ADD SS:[EBP-10],EAX
55078A7B 8B45 F0       MOV EAX,SS:[EBP-10]
55078A7E C1E0 0C       SHL EAX,C
55078A81 8B4D F0       MOV ECX,SS:[EBP-10]
55078A84 C1E9 14       SHR ECX,14
55078A87 0BC1          OR EAX,ECX
55078A89 8945 F0       MOV SS:[EBP-10],EAX
55078A8C 8B45 FC       MOV EAX,SS:[EBP-4]
55078A8F 0145 F0       ADD SS:[EBP-10],EAX
55078A92 8B45 F0       MOV EAX,SS:[EBP-10]
55078A95 F7D0          NOT EAX
55078A97 2345 F8       AND EAX,SS:[EBP-8]
55078A9A 8B4D FC       MOV ECX,SS:[EBP-4]
55078A9D 234D F0       AND ECX,SS:[EBP-10]
55078AA0 0BC1          OR EAX,ECX
55078AA2 8B4D 0C       MOV ECX,SS:[EBP+C]
55078AA5 0341 28       ADD EAX,DS:[ECX+28]
55078AA8 2D 4FA40000 SUB EAX,A44F
55078AAD 0145 F4       ADD SS:[EBP-C],EAX
55078AB0 8B45 F4       MOV EAX,SS:[EBP-C]
55078AB3 C1E0 11       SHL EAX,11
55078AB6 8B4D F4       MOV ECX,SS:[EBP-C]
55078AB9 C1E9 0F       SHR ECX,F
55078ABC 0BC1          OR EAX,ECX
55078ABE 8945 F4       MOV SS:[EBP-C],EAX
55078AC1 8B45 F0       MOV EAX,SS:[EBP-10]
55078AC4 0145 F4       ADD SS:[EBP-C],EAX
55078AC7 8B45 F4       MOV EAX,SS:[EBP-C]
55078ACA F7D0          NOT EAX
55078ACC 2345 FC       AND EAX,SS:[EBP-4]
55078ACF 8B4D F4       MOV ECX,SS:[EBP-C]
55078AD2 234D F0       AND ECX,SS:[EBP-10]
55078AD5 0BC1          OR EAX,ECX
55078AD7 8B4D 0C       MOV ECX,SS:[EBP+C]
55078ADA 0341 2C       ADD EAX,DS:[ECX+2C]
55078ADD 2D 4228A376 SUB EAX,76A32842
55078AE2 0145 F8       ADD SS:[EBP-8],EAX
55078AE5 8B45 F8       MOV EAX,SS:[EBP-8]
55078AE8 C1E8 0A       SHR EAX,A
55078AEB 8B4D F8       MOV ECX,SS:[EBP-8]
55078AEE C1E1 16       SHL ECX,16
55078AF1 0BC1          OR EAX,ECX
55078AF3 8945 F8       MOV SS:[EBP-8],EAX
55078AF6 8B45 F4       MOV EAX,SS:[EBP-C]
55078AF9 0145 F8       ADD SS:[EBP-8],EAX
55078AFC 8B45 F8       MOV EAX,SS:[EBP-8]
55078AFF F7D0          NOT EAX
55078B01 2345 F0       AND EAX,SS:[EBP-10]
55078B04 8B4D F4       MOV ECX,SS:[EBP-C]
55078B07 234D F8       AND ECX,SS:[EBP-8]
55078B0A 0BC1          OR EAX,ECX
55078B0C 8B4D 0C       MOV ECX,SS:[EBP+C]
55078B0F 0341 30       ADD EAX,DS:[ECX+30]
55078B12 05 2211906B ADD EAX,6B901122
55078B17 0145 FC       ADD SS:[EBP-4],EAX
55078B1A 8B45 FC       MOV EAX,SS:[EBP-4]
55078B1D C1E0 07       SHL EAX,7
55078B20 8B4D FC       MOV ECX,SS:[EBP-4]
55078B23 C1E9 19       SHR ECX,19
55078B26 0BC1          OR EAX,ECX
55078B28 8945 FC       MOV SS:[EBP-4],EAX
55078B2B 8B45 F8       MOV EAX,SS:[EBP-8]
55078B2E 0145 FC       ADD SS:[EBP-4],EAX
55078B31 8B45 FC       MOV EAX,SS:[EBP-4]
55078B34 F7D0          NOT EAX
55078B36 2345 F4       AND EAX,SS:[EBP-C]
55078B39 8B4D F8       MOV ECX,SS:[EBP-8]
55078B3C 234D FC       AND ECX,SS:[EBP-4]
55078B3F 0BC1          OR EAX,ECX
55078B41 8B4D 0C       MOV ECX,SS:[EBP+C]
55078B44 0341 34       ADD EAX,DS:[ECX+34]
55078B47 2D 6D8E6702 SUB EAX,2678E6D

[课程]Android-CTF解题方法汇总！

上传的附件：

dongle_MT.rar （351.26kb，32次下载）

收藏・0

免费・0

支持

最新回复 (2)
dally 雪币： 197 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 55 粉丝 0 关注私信	dally 2 楼下面是Write代码：地址十六进制反汇编 --------------------------------------------------------------- 55078100 B8 03000000 MOV EAX,3 55078105 C3 RETN 55078106 CC INT3 55078107 CC INT3 55078108 CC INT3 55078109 CC INT3 5507810A CC INT3 5507810B CC INT3 5507810C CC INT3 5507810D CC INT3 5507810E CC INT3 5507810F CC INT3 55078110 55 PUSH EBP 55078111 8BEC MOV EBP,ESP 55078113 51 PUSH ECX 55078114 56 PUSH ESI 55078115 57 PUSH EDI 55078116 E8 95C0FFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ 5507811B 8BF0 MOV ESI,EAX 5507811D 85F6 TEST ESI,ESI 5507811F 75 07 JNZ SHORT 55078128 ………… ………… 55078B01 2345 F0 AND EAX,SS:[EBP-10] 55078B04 8B4D F4 MOV ECX,SS:[EBP-C] 55078B07 234D F8 AND ECX,SS:[EBP-8] 55078B0A 0BC1 OR EAX,ECX 55078B0C 8B4D 0C MOV ECX,SS:[EBP+C] 55078B0F 0341 30 ADD EAX,DS:[ECX+30] 55078B12 05 2211906B ADD EAX,6B901122 55078B17 0145 FC ADD SS:[EBP-4],EAX 55078B1A 8B45 FC MOV EAX,SS:[EBP-4] 55078B1D C1E0 07 SHL EAX,7 55078B20 8B4D FC MOV ECX,SS:[EBP-4] 55078B23 C1E9 19 SHR ECX,19 55078B26 0BC1 OR EAX,ECX 2014-12-8 21:38 0
dally 雪币： 197 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 55 粉丝 0 关注私信	dally 3 楼忘了说了，我是在win7 64 下测试的，此程序主要用深思、HASP等狗，能够正常运行，和谐的是功能方面的限制，让其能出声音。 2014-12-9 07:37 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复

dally

发帖

回帖

RANK

关注

私信

他的文章

关于我们

联系我们

企业服务

看雪公众号

最新回复 (2)
dally 雪币： 197 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 55 粉丝 0 关注私信	dally 2 楼下面是Write代码：地址十六进制反汇编 --------------------------------------------------------------- 55078100 B8 03000000 MOV EAX,3 55078105 C3 RETN 55078106 CC INT3 55078107 CC INT3 55078108 CC INT3 55078109 CC INT3 5507810A CC INT3 5507810B CC INT3 5507810C CC INT3 5507810D CC INT3 5507810E CC INT3 5507810F CC INT3 55078110 55 PUSH EBP 55078111 8BEC MOV EBP,ESP 55078113 51 PUSH ECX 55078114 56 PUSH ESI 55078115 57 PUSH EDI 55078116 E8 95C0FFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ 5507811B 8BF0 MOV ESI,EAX 5507811D 85F6 TEST ESI,ESI 5507811F 75 07 JNZ SHORT 55078128 ………… ………… 55078B01 2345 F0 AND EAX,SS:[EBP-10] 55078B04 8B4D F4 MOV ECX,SS:[EBP-C] 55078B07 234D F8 AND ECX,SS:[EBP-8] 55078B0A 0BC1 OR EAX,ECX 55078B0C 8B4D 0C MOV ECX,SS:[EBP+C] 55078B0F 0341 30 ADD EAX,DS:[ECX+30] 55078B12 05 2211906B ADD EAX,6B901122 55078B17 0145 FC ADD SS:[EBP-4],EAX 55078B1A 8B45 FC MOV EAX,SS:[EBP-4] 55078B1D C1E0 07 SHL EAX,7 55078B20 8B4D FC MOV ECX,SS:[EBP-4] 55078B23 C1E9 19 SHR ECX,19 55078B26 0BC1 OR EAX,ECX 2014-12-8 21:38 0
dally 雪币： 197 活跃值： (10) 能力值： ( LV2，RANK：10 ) 在线值：发帖 6 回帖 55 粉丝 0 关注私信	dally 3 楼忘了说了，我是在win7 64 下测试的，此程序主要用深思、HASP等狗，能够正常运行，和谐的是功能方面的限制，让其能出声音。 2014-12-9 07:37 0
	游客登录 \| 注册方可回帖回帖表情雪币赚取及消费高级回复