-
-
[旧帖] 某软件加密狗动态库文件修改问题 0.00雪花
-
发表于: 2014-12-8 21:37 4025
-
最近在学习和谐某软件的加密狗,思路是:重新编写构造一个和加密狗API一样的DLL动态库文件,我认为应该修改read部分代码,经我分析,搞了几天都没能成功,可能是我的哪个步骤出错了,现请高手指点指点,谢谢!(dll文件在压缩包内,此狗为深思灵锐i)下面是read的一段:
地址 十六进制 反汇编
---------------------------------------------------------------
55078110 55 PUSH EBP
55078111 8BEC MOV EBP,ESP
55078113 51 PUSH ECX
55078114 56 PUSH ESI
55078115 57 PUSH EDI
55078116 E8 95C0FFFF CALL dongle_MT.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507811B 8BF0 MOV ESI,EAX
5507811D 85F6 TEST ESI,ESI
5507811F 75 07 JNZ SHORT 55078128
55078121 BF 06090000 MOV EDI,906
55078126 EB 5C JMP SHORT 55078184
55078128 8B45 14 MOV EAX,SS:[EBP+14]
5507812B 83E8 00 SUB EAX,0
5507812E 74 08 JE SHORT 55078138
55078130 48 DEC EAX
55078131 B8 0E000000 MOV EAX,E
55078136 74 05 JE SHORT 5507813D
55078138 B8 09000000 MOV EAX,9
5507813D 8B16 MOV EDX,DS:[ESI]
5507813F 50 PUSH EAX
55078140 8B42 08 MOV EAX,DS:[EDX+8]
55078143 6A 00 PUSH 0
55078145 6A 00 PUSH 0
55078147 6A 00 PUSH 0
55078149 6A 00 PUSH 0
5507814B 8BCE MOV ECX,ESI
5507814D FFD0 CALL EAX
5507814F 8BF8 MOV EDI,EAX
55078151 85FF TEST EDI,EDI
55078153 75 2F JNZ SHORT 55078184
55078155 8B16 MOV EDX,DS:[ESI]
55078157 8B52 14 MOV EDX,DS:[EDX+14]
5507815A 8D45 FC LEA EAX,SS:[EBP-4]
5507815D 50 PUSH EAX
5507815E 8BCE MOV ECX,ESI
55078160 FFD2 CALL EDX
55078162 85C0 TEST EAX,EAX
55078164 75 07 JNZ SHORT 5507816D
55078166 BF 07090000 MOV EDI,907
5507816B EB 17 JMP SHORT 55078184
5507816D 8B4D 10 MOV ECX,SS:[EBP+10]
55078170 8B10 MOV EDX,DS:[EAX]
55078172 8B52 20 MOV EDX,DS:[EDX+20]
55078175 51 PUSH ECX
55078176 8B4D 0C MOV ECX,SS:[EBP+C]
55078179 51 PUSH ECX
5507817A 8B4D 08 MOV ECX,SS:[EBP+8]
5507817D 51 PUSH ECX
5507817E 8BC8 MOV ECX,EAX
55078180 FFD2 CALL EDX
55078182 8BF8 MOV EDI,EAX
55078184 8B06 MOV EAX,DS:[ESI]
55078186 8B50 10 MOV EDX,DS:[EAX+10]
55078189 8BCE MOV ECX,ESI
5507818B FFD2 CALL EDX
5507818D 56 PUSH ESI
5507818E E8 9DBBFFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
55078193 83C4 04 ADD ESP,4
55078196 8BC7 MOV EAX,EDI
55078198 5F POP EDI
55078199 5E POP ESI
5507819A 8BE5 MOV ESP,EBP
5507819C 5D POP EBP
5507819D C3 RETN
5507819E CC INT3
5507819F CC INT3
550781A0 55 PUSH EBP
550781A1 8BEC MOV EBP,ESP
550781A3 83EC 14 SUB ESP,14
550781A6 837D 08 00 CMP DWORD PTR SS:[EBP+8],0
550781AA 75 09 JNZ SHORT 550781B5
550781AC B8 05020000 MOV EAX,205
550781B1 8BE5 MOV ESP,EBP
550781B3 5D POP EBP
550781B4 C3 RETN
550781B5 53 PUSH EBX
550781B6 33DB XOR EBX,EBX
550781B8 57 PUSH EDI
550781B9 895D FC MOV SS:[EBP-4],EBX
550781BC E8 EFBFFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
550781C1 8BF8 MOV EDI,EAX
550781C3 897D F0 MOV SS:[EBP-10],EDI
550781C6 85FF TEST EDI,EDI
550781C8 75 0C JNZ SHORT 550781D6
550781CA C745 F8 06090000MOV DWORD PTR SS:[EBP-8],906
550781D1 E9 76010000 JMP 5507834C
550781D6 8B45 0C MOV EAX,SS:[EBP+C]
550781D9 83E8 00 SUB EAX,0
550781DC 74 08 JE SHORT 550781E6
550781DE 48 DEC EAX
550781DF B8 0E000000 MOV EAX,E
550781E4 74 05 JE SHORT 550781EB
550781E6 B8 09000000 MOV EAX,9
550781EB 8B17 MOV EDX,DS:[EDI]
550781ED 50 PUSH EAX
550781EE 8B42 04 MOV EAX,DS:[EDX+4]
550781F1 6A 00 PUSH 0
550781F3 6A 00 PUSH 0
550781F5 6A 00 PUSH 0
550781F7 6A 00 PUSH 0
550781F9 8BCF MOV ECX,EDI
550781FB FFD0 CALL EAX
550781FD 8945 F8 MOV SS:[EBP-8],EAX
55078200 85C0 TEST EAX,EAX
55078202 0F85 44010000 JNZ 5507834C
55078208 8B17 MOV EDX,DS:[EDI]
5507820A 8B52 14 MOV EDX,DS:[EDX+14]
5507820D 8D45 EC LEA EAX,SS:[EBP-14]
55078210 50 PUSH EAX
55078211 8BCF MOV ECX,EDI
55078213 FFD2 CALL EDX
55078215 8945 F4 MOV SS:[EBP-C],EAX
55078218 85C0 TEST EAX,EAX
5507821A 75 0B JNZ SHORT 55078227
5507821C 5F POP EDI
5507821D B8 07090000 MOV EAX,907
55078222 5B POP EBX
55078223 8BE5 MOV ESP,EBP
55078225 5D POP EBP
55078226 C3 RETN
55078227 56 PUSH ESI
55078228 EB 09 JMP SHORT 55078233
5507822A 8D9B 00000000 LEA EBX,DS:[EBX]
55078230 8B45 F4 MOV EAX,SS:[EBP-C]
55078233 8B10 MOV EDX,DS:[EAX]
55078235 8BC8 MOV ECX,EAX
55078237 8B42 04 MOV EAX,DS:[EDX+4]
5507823A FFD0 CALL EAX
5507823C 8BF0 MOV ESI,EAX
5507823E 8B16 MOV EDX,DS:[ESI]
55078240 8B02 MOV EAX,DS:[EDX]
55078242 8BCE MOV ECX,ESI
55078244 FFD0 CALL EAX
55078246 83F8 01 CMP EAX,1
55078249 75 7E JNZ SHORT 550782C9
5507824B 8B16 MOV EDX,DS:[ESI]
5507824D 8B42 10 MOV EAX,DS:[EDX+10]
55078250 8BCE MOV ECX,ESI
55078252 FFD0 CALL EAX
55078254 8BF0 MOV ESI,EAX
55078256 8B16 MOV EDX,DS:[ESI]
55078258 8B42 04 MOV EAX,DS:[EDX+4]
5507825B 8BCE MOV ECX,ESI
5507825D 33DB XOR EBX,EBX
5507825F FFD0 CALL EAX
55078261 85C0 TEST EAX,EAX
55078263 7E 5D JLE SHORT 550782C2
55078265 8B16 MOV EDX,DS:[ESI]
55078267 8B42 08 MOV EAX,DS:[EDX+8]
5507826A 53 PUSH EBX
5507826B 8BCE MOV ECX,ESI
5507826D FFD0 CALL EAX
5507826F 8BF8 MOV EDI,EAX
55078271 8B17 MOV EDX,DS:[EDI]
55078273 8B42 08 MOV EAX,DS:[EDX+8]
55078276 8BCF MOV ECX,EDI
55078278 FFD0 CALL EAX
5507827A 85C0 TEST EAX,EAX
5507827C 74 2E JE SHORT 550782AC
5507827E 8BC8 MOV ECX,EAX
55078280 8B45 08 MOV EAX,SS:[EBP+8]
55078283 8A10 MOV DL,DS:[EAX]
55078285 3A11 CMP DL,DS:[ECX]
55078287 75 1A JNZ SHORT 550782A3
55078289 84D2 TEST DL,DL
5507828B 74 12 JE SHORT 5507829F
5507828D 8A50 01 MOV DL,DS:[EAX+1]
55078290 3A51 01 CMP DL,DS:[ECX+1]
55078293 75 0E JNZ SHORT 550782A3
55078295 83C0 02 ADD EAX,2
55078298 83C1 02 ADD ECX,2
5507829B 84D2 TEST DL,DL
5507829D 75 E4 JNZ SHORT 55078283
5507829F 33C0 XOR EAX,EAX
550782A1 EB 05 JMP SHORT 550782A8
550782A3 1BC0 SBB EAX,EAX
550782A5 83D8 FF SBB EAX,-1
550782A8 85C0 TEST EAX,EAX
550782AA 74 10 JE SHORT 550782BC
550782AC 8B16 MOV EDX,DS:[ESI]
550782AE 8B42 04 MOV EAX,DS:[EDX+4]
550782B1 8BCE MOV ECX,ESI
550782B3 43 INC EBX
550782B4 FFD0 CALL EAX
550782B6 3BD8 CMP EBX,EAX
550782B8 7C AB JL SHORT 55078265
550782BA EB 03 JMP SHORT 550782BF
550782BC 897D FC MOV SS:[EBP-4],EDI
550782BF 8B7D F0 MOV EDI,SS:[EBP-10]
550782C2 8B5D FC MOV EBX,SS:[EBP-4]
550782C5 85DB TEST EBX,EBX
550782C7 75 25 JNZ SHORT 550782EE
550782C9 8B17 MOV EDX,DS:[EDI]
550782CB 8B45 EC MOV EAX,SS:[EBP-14]
550782CE 8B52 18 MOV EDX,DS:[EDX+18]
550782D1 50 PUSH EAX
550782D2 8BCF MOV ECX,EDI
550782D4 FFD2 CALL EDX
550782D6 8945 F4 MOV SS:[EBP-C],EAX
550782D9 85C0 TEST EAX,EAX
550782DB 0F85 4FFFFFFF JNZ 55078230
550782E1 85DB TEST EBX,EBX
550782E3 75 09 JNZ SHORT 550782EE
550782E5 C745 F8 05090000MOV DWORD PTR SS:[EBP-8],905
550782EC EB 5D JMP SHORT 5507834B
550782EE 8B45 0C MOV EAX,SS:[EBP+C]
550782F1 83F8 04 CMP EAX,4
550782F4 77 55 JA SHORT 5507834B
550782F6 FF2485 68830755JMP DS:[EAX*4+55078368]
550782FD 8B03 MOV EAX,DS:[EBX]
550782FF 8B50 20 MOV EDX,DS:[EAX+20]
55078302 8BCB MOV ECX,EBX
55078304 FFD2 CALL EDX
55078306 EB 3E JMP SHORT 55078346
55078308 8B4D F4 MOV ECX,SS:[EBP-C]
5507830B 8B11 MOV EDX,DS:[ECX]
5507830D 8B02 MOV EAX,DS:[EDX]
5507830F 6A 00 PUSH 0
55078311 FFD0 CALL EAX
55078313 8B10 MOV EDX,DS:[EAX]
55078315 8BC8 MOV ECX,EAX
55078317 8B42 18 MOV EAX,DS:[EDX+18]
5507831A FFD0 CALL EAX
5507831C EB 28 JMP SHORT 55078346
5507831E C745 F8 03000000MOV DWORD PTR SS:[EBP-8],3
55078325 EB 24 JMP SHORT 5507834B
55078327 8B13 MOV EDX,DS:[EBX]
55078329 8B42 40 MOV EAX,DS:[EDX+40]
5507832C 8BCB MOV ECX,EBX
5507832E FFD0 CALL EAX
55078330 8B55 10 MOV EDX,SS:[EBP+10]
55078333 0FB7C8 MOVZX ECX,AX
55078336 890A MOV DS:[EDX],ECX
55078338 EB 11 JMP SHORT 5507834B
5507833A 8B03 MOV EAX,DS:[EBX]
5507833C 8B50 54 MOV EDX,DS:[EAX+54]
5507833F 8BCB MOV ECX,EBX
55078341 FFD2 CALL EDX
55078343 0FB7C0 MOVZX EAX,AX
55078346 8B4D 10 MOV ECX,SS:[EBP+10]
55078349 8901 MOV DS:[ECX],EAX
5507834B 5E POP ESI
5507834C 8B17 MOV EDX,DS:[EDI]
5507834E 8B42 10 MOV EAX,DS:[EDX+10]
55078351 8BCF MOV ECX,EDI
55078353 FFD0 CALL EAX
55078355 57 PUSH EDI
55078356 E8 D5B9FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
5507835B 8B45 F8 MOV EAX,SS:[EBP-8]
5507835E 83C4 04 ADD ESP,4
55078361 5F POP EDI
55078362 5B POP EBX
55078363 8BE5 MOV ESP,EBP
55078365 5D POP EBP
55078366 C3 RETN
55078367 90 NOP
55078368 0883 0755FD82 OR DS:[EBX+82FD5507],AL
5507836E 07 POP ES
5507836F 55 PUSH EBP
55078370 1E PUSH DS
55078371 8307 55 ADD DWORD PTR DS:[EDI],55
55078374 27 DAA
55078375 8307 55 ADD DWORD PTR DS:[EDI],55
55078378 3A83 0755CCCC CMP AL,DS:[EBX+CCCC5507]
5507837E CC INT3
5507837F CC INT3
55078380 55 PUSH EBP
55078381 8BEC MOV EBP,ESP
55078383 51 PUSH ECX
55078384 56 PUSH ESI
55078385 57 PUSH EDI
55078386 E8 25BEFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507838B 8BF0 MOV ESI,EAX
5507838D 85F6 TEST ESI,ESI
5507838F 75 07 JNZ SHORT 55078398
55078391 BF 06090000 MOV EDI,906
55078396 EB 74 JMP SHORT 5507840C
55078398 8B45 0C MOV EAX,SS:[EBP+C]
5507839B 83E8 00 SUB EAX,0
5507839E 74 08 JE SHORT 550783A8
550783A0 48 DEC EAX
550783A1 B8 0E000000 MOV EAX,E
550783A6 74 05 JE SHORT 550783AD
550783A8 B8 09000000 MOV EAX,9
550783AD 8B16 MOV EDX,DS:[ESI]
550783AF 50 PUSH EAX
550783B0 8B42 08 MOV EAX,DS:[EDX+8]
550783B3 6A 00 PUSH 0
550783B5 6A 00 PUSH 0
550783B7 6A 00 PUSH 0
550783B9 6A 00 PUSH 0
550783BB 8BCE MOV ECX,ESI
550783BD FFD0 CALL EAX
550783BF 8BF8 MOV EDI,EAX
550783C1 85FF TEST EDI,EDI
550783C3 75 47 JNZ SHORT 5507840C
550783C5 8B16 MOV EDX,DS:[ESI]
550783C7 8B52 14 MOV EDX,DS:[EDX+14]
550783CA 8D45 FC LEA EAX,SS:[EBP-4]
550783CD 50 PUSH EAX
550783CE 8BCE MOV ECX,ESI
550783D0 FFD2 CALL EDX
550783D2 8BF8 MOV EDI,EAX
550783D4 85FF TEST EDI,EDI
550783D6 75 07 JNZ SHORT 550783DF
550783D8 BF 07090000 MOV EDI,907
550783DD EB 2D JMP SHORT 5507840C
550783DF 8B07 MOV EAX,DS:[EDI]
550783E1 8B10 MOV EDX,DS:[EAX]
550783E3 6A 00 PUSH 0
550783E5 8BCF MOV ECX,EDI
550783E7 FFD2 CALL EDX
550783E9 8B10 MOV EDX,DS:[EAX]
550783EB 8BC8 MOV ECX,EAX
550783ED 8B42 24 MOV EAX,DS:[EDX+24]
550783F0 FFD0 CALL EAX
550783F2 84C0 TEST AL,AL
550783F4 74 11 JE SHORT 55078407
550783F6 8B17 MOV EDX,DS:[EDI]
550783F8 8B45 08 MOV EAX,SS:[EBP+8]
550783FB 8B52 10 MOV EDX,DS:[EDX+10]
550783FE 50 PUSH EAX
550783FF 8BCF MOV ECX,EDI
55078401 FFD2 CALL EDX
55078403 8BF8 MOV EDI,EAX
55078405 EB 05 JMP SHORT 5507840C
55078407 BF 03000000 MOV EDI,3
5507840C 8B06 MOV EAX,DS:[ESI]
5507840E 8B50 10 MOV EDX,DS:[EAX+10]
55078411 8BCE MOV ECX,ESI
55078413 FFD2 CALL EDX
55078415 56 PUSH ESI
55078416 E8 15B9FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
5507841B 83C4 04 ADD ESP,4
5507841E 8BC7 MOV EAX,EDI
55078420 5F POP EDI
55078421 5E POP ESI
55078422 8BE5 MOV ESP,EBP
55078424 5D POP EBP
55078425 C3 RETN
55078426 CC INT3
55078427 CC INT3
55078428 CC INT3
55078429 CC INT3
5507842A CC INT3
5507842B CC INT3
5507842C CC INT3
5507842D CC INT3
5507842E CC INT3
5507842F CC INT3
55078430 55 PUSH EBP
55078431 8BEC MOV EBP,ESP
55078433 53 PUSH EBX
55078434 8B5D 08 MOV EBX,SS:[EBP+8]
55078437 85DB TEST EBX,EBX
55078439 75 08 JNZ SHORT 55078443
5507843B B8 05020000 MOV EAX,205
55078440 5B POP EBX
55078441 5D POP EBP
55078442 C3 RETN
55078443 56 PUSH ESI
55078444 57 PUSH EDI
55078445 E8 66BDFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507844A 8BF0 MOV ESI,EAX
5507844C 85F6 TEST ESI,ESI
5507844E 75 07 JNZ SHORT 55078457
55078450 BF 06090000 MOV EDI,906
55078455 EB 5A JMP SHORT 550784B1
55078457 8B45 0C MOV EAX,SS:[EBP+C]
5507845A 83E8 00 SUB EAX,0
5507845D 74 08 JE SHORT 55078467
5507845F 48 DEC EAX
55078460 B8 0E000000 MOV EAX,E
55078465 74 05 JE SHORT 5507846C
55078467 B8 09000000 MOV EAX,9
5507846C 8B16 MOV EDX,DS:[ESI]
5507846E 50 PUSH EAX
5507846F 8B42 08 MOV EAX,DS:[EDX+8]
55078472 6A 00 PUSH 0
55078474 6A 00 PUSH 0
55078476 6A 00 PUSH 0
55078478 6A 00 PUSH 0
5507847A 8BCE MOV ECX,ESI
5507847C FFD0 CALL EAX
5507847E 8BF8 MOV EDI,EAX
55078480 85FF TEST EDI,EDI
55078482 75 2D JNZ SHORT 550784B1
55078484 8B16 MOV EDX,DS:[ESI]
55078486 8B52 14 MOV EDX,DS:[EDX+14]
55078489 8D45 08 LEA EAX,SS:[EBP+8]
5507848C 50 PUSH EAX
5507848D 8BCE MOV ECX,ESI
5507848F FFD2 CALL EDX
55078491 85C0 TEST EAX,EAX
55078493 75 07 JNZ SHORT 5507849C
55078495 BF 07090000 MOV EDI,907
5507849A EB 15 JMP SHORT 550784B1
5507849C 8B10 MOV EDX,DS:[EAX]
5507849E 8BC8 MOV ECX,EAX
550784A0 8B02 MOV EAX,DS:[EDX]
550784A2 6A 00 PUSH 0
550784A4 FFD0 CALL EAX
550784A6 8B10 MOV EDX,DS:[EAX]
550784A8 8BC8 MOV ECX,EAX
550784AA 8B42 18 MOV EAX,DS:[EDX+18]
550784AD FFD0 CALL EAX
550784AF 8903 MOV DS:[EBX],EAX
550784B1 8B16 MOV EDX,DS:[ESI]
550784B3 8B42 10 MOV EAX,DS:[EDX+10]
550784B6 8BCE MOV ECX,ESI
550784B8 FFD0 CALL EAX
550784BA 56 PUSH ESI
550784BB E8 70B8FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
550784C0 83C4 04 ADD ESP,4
550784C3 8BC7 MOV EAX,EDI
550784C5 5F POP EDI
550784C6 5E POP ESI
550784C7 5B POP EBX
550784C8 5D POP EBP
550784C9 C3 RETN
550784CA CC INT3
550784CB CC INT3
550784CC CC INT3
550784CD CC INT3
550784CE CC INT3
550784CF CC INT3
550784D0 55 PUSH EBP
550784D1 8BEC MOV EBP,ESP
550784D3 53 PUSH EBX
550784D4 8B5D 08 MOV EBX,SS:[EBP+8]
550784D7 85DB TEST EBX,EBX
550784D9 75 08 JNZ SHORT 550784E3
550784DB B8 05020000 MOV EAX,205
550784E0 5B POP EBX
550784E1 5D POP EBP
550784E2 C3 RETN
550784E3 56 PUSH ESI
550784E4 57 PUSH EDI
550784E5 E8 C6BCFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
550784EA 8BF0 MOV ESI,EAX
550784EC 85F6 TEST ESI,ESI
550784EE 75 07 JNZ SHORT 550784F7
550784F0 BF 06090000 MOV EDI,906
550784F5 EB 5A JMP SHORT 55078551
550784F7 8B45 0C MOV EAX,SS:[EBP+C]
550784FA 83E8 00 SUB EAX,0
550784FD 74 08 JE SHORT 55078507
550784FF 48 DEC EAX
55078500 B8 0E000000 MOV EAX,E
55078505 74 05 JE SHORT 5507850C
55078507 B8 09000000 MOV EAX,9
5507850C 8B16 MOV EDX,DS:[ESI]
5507850E 50 PUSH EAX
5507850F 8B42 08 MOV EAX,DS:[EDX+8]
55078512 6A 00 PUSH 0
55078514 6A 00 PUSH 0
55078516 6A 00 PUSH 0
55078518 6A 00 PUSH 0
5507851A 8BCE MOV ECX,ESI
5507851C FFD0 CALL EAX
5507851E 8BF8 MOV EDI,EAX
55078520 85FF TEST EDI,EDI
55078522 75 2D JNZ SHORT 55078551
55078524 8B16 MOV EDX,DS:[ESI]
55078526 8B52 14 MOV EDX,DS:[EDX+14]
55078529 8D45 08 LEA EAX,SS:[EBP+8]
5507852C 50 PUSH EAX
5507852D 8BCE MOV ECX,ESI
5507852F FFD2 CALL EDX
55078531 85C0 TEST EAX,EAX
55078533 75 07 JNZ SHORT 5507853C
55078535 BF 07090000 MOV EDI,907
5507853A EB 15 JMP SHORT 55078551
5507853C 8B10 MOV EDX,DS:[EAX]
5507853E 8BC8 MOV ECX,EAX
55078540 8B02 MOV EAX,DS:[EDX]
55078542 6A 00 PUSH 0
55078544 FFD0 CALL EAX
55078546 8B10 MOV EDX,DS:[EAX]
55078548 8BC8 MOV ECX,EAX
5507854A 8B42 1C MOV EAX,DS:[EDX+1C]
5507854D FFD0 CALL EAX
5507854F 8903 MOV DS:[EBX],EAX
55078551 8B16 MOV EDX,DS:[ESI]
55078553 8B42 10 MOV EAX,DS:[EDX+10]
55078556 8BCE MOV ECX,ESI
55078558 FFD0 CALL EAX
5507855A 56 PUSH ESI
5507855B E8 D0B7FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
55078560 83C4 04 ADD ESP,4
55078563 8BC7 MOV EAX,EDI
55078565 5F POP EDI
55078566 5E POP ESI
55078567 5B POP EBX
55078568 5D POP EBP
55078569 C3 RETN
5507856A CC INT3
5507856B CC INT3
5507856C 55 PUSH EBP
5507856D 8BEC MOV EBP,ESP
5507856F 53 PUSH EBX
55078570 56 PUSH ESI
55078571 57 PUSH EDI
55078572 8B45 08 MOV EAX,SS:[EBP+8]
55078575 C740 04 00000000MOV DWORD PTR DS:[EAX+4],0
5507857C 8B45 08 MOV EAX,SS:[EBP+8]
5507857F 8B40 04 MOV EAX,DS:[EAX+4]
55078582 8B4D 08 MOV ECX,SS:[EBP+8]
55078585 8901 MOV DS:[ECX],EAX
55078587 8B45 08 MOV EAX,SS:[EBP+8]
5507858A C740 08 01234567MOV DWORD PTR DS:[EAX+8],67452301
55078591 8B45 08 MOV EAX,SS:[EBP+8]
55078594 C740 0C 89ABCDEFMOV DWORD PTR DS:[EAX+C],EFCDAB89
5507859B 8B45 08 MOV EAX,SS:[EBP+8]
5507859E C740 10 FEDCBA98MOV DWORD PTR DS:[EAX+10],98BADCFE
550785A5 8B45 08 MOV EAX,SS:[EBP+8]
550785A8 C740 14 76543210MOV DWORD PTR DS:[EAX+14],10325476
550785AF EB 00 JMP SHORT 550785B1
550785B1 5F POP EDI
550785B2 5E POP ESI
550785B3 5B POP EBX
550785B4 C9 LEAVE
550785B5 C3 RETN
550785B6 55 PUSH EBP
550785B7 8BEC MOV EBP,ESP
550785B9 83EC 50 SUB ESP,50
550785BC 53 PUSH EBX
550785BD 56 PUSH ESI
550785BE 57 PUSH EDI
550785BF 8B45 08 MOV EAX,SS:[EBP+8]
550785C2 8B00 MOV EAX,DS:[EAX]
550785C4 C1E8 03 SHR EAX,3
550785C7 83E0 3F AND EAX,3F
550785CA 8945 B4 MOV SS:[EBP-4C],EAX
550785CD 8B45 08 MOV EAX,SS:[EBP+8]
550785D0 8B00 MOV EAX,DS:[EAX]
550785D2 8B4D 10 MOV ECX,SS:[EBP+10]
550785D5 8D04C8 LEA EAX,DS:[EAX+ECX*8]
550785D8 8B4D 08 MOV ECX,SS:[EBP+8]
550785DB 3B01 CMP EAX,DS:[ECX]
550785DD 73 06 JNB SHORT 550785E5
550785DF 8B45 08 MOV EAX,SS:[EBP+8]
550785E2 FF40 04 INC DWORD PTR DS:[EAX+4]
550785E5 8B45 10 MOV EAX,SS:[EBP+10]
550785E8 C1E0 03 SHL EAX,3
550785EB 8B4D 08 MOV ECX,SS:[EBP+8]
550785EE 0101 ADD DS:[ECX],EAX
550785F0 8B45 10 MOV EAX,SS:[EBP+10]
550785F3 C1E8 1D SHR EAX,1D
550785F6 8B4D 08 MOV ECX,SS:[EBP+8]
550785F9 0141 04 ADD DS:[ECX+4],EAX
550785FC 837D B4 00 CMP DWORD PTR SS:[EBP-4C],0
55078600 75 29 JNZ SHORT 5507862B
55078602 F645 0C 03 TEST BYTE PTR SS:[EBP+C],3
55078606 75 23 JNZ SHORT 5507862B
55078608 837D 10 40 CMP DWORD PTR SS:[EBP+10],40
5507860C 72 1D JB SHORT 5507862B
5507860E 8B45 0C MOV EAX,SS:[EBP+C]
55078611 50 PUSH EAX
55078612 8B45 08 MOV EAX,SS:[EBP+8]
55078615 83C0 08 ADD EAX,8
55078618 50 PUSH EAX
55078619 E8 37020000 CALL 55078855
5507861E 83C4 08 ADD ESP,8
55078621 836D 10 40 SUB DWORD PTR SS:[EBP+10],40
55078625 8345 0C 40 ADD DWORD PTR SS:[EBP+C],40
55078629 EB DD JMP SHORT 55078608
5507862B 8B45 10 MOV EAX,SS:[EBP+10]
5507862E 8945 B0 MOV SS:[EBP-50],EAX
55078631 FF4D 10 DEC DWORD PTR SS:[EBP+10]
55078634 837D B0 00 CMP DWORD PTR SS:[EBP-50],0
55078638 0F84 B2000000 JE 550786F0
5507863E 8B45 0C MOV EAX,SS:[EBP+C]
55078641 8A00 MOV AL,DS:[EAX]
55078643 8B4D B4 MOV ECX,SS:[EBP-4C]
55078646 8B55 08 MOV EDX,SS:[EBP+8]
55078649 88440A 18 MOV DS:[EDX+ECX+18],AL
5507864D FF45 0C INC DWORD PTR SS:[EBP+C]
55078650 FF45 B4 INC DWORD PTR SS:[EBP-4C]
55078653 837D B4 40 CMP DWORD PTR SS:[EBP-4C],40
55078657 0F85 8E000000 JNZ 550786EB
5507865D C745 BC 00000000MOV DWORD PTR SS:[EBP-44],0
55078664 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
5507866B EB 07 JMP SHORT 55078674
5507866D FF45 BC INC DWORD PTR SS:[EBP-44]
55078670 8345 B8 04 ADD DWORD PTR SS:[EBP-48],4
55078674 837D BC 10 CMP DWORD PTR SS:[EBP-44],10
55078678 73 57 JNB SHORT 550786D1
5507867A 8B45 B8 MOV EAX,SS:[EBP-48]
5507867D 8B4D 08 MOV ECX,SS:[EBP+8]
55078680 8A4401 19 MOV AL,DS:[ECX+EAX+19]
55078684 25 FF000000 AND EAX,FF
55078689 C1E0 08 SHL EAX,8
5507868C 8B4D B8 MOV ECX,SS:[EBP-48]
5507868F 8B55 08 MOV EDX,SS:[EBP+8]
55078692 8A4C0A 1B MOV CL,DS:[EDX+ECX+1B]
55078696 81E1 FF000000 AND ECX,FF
5507869C C1E1 18 SHL ECX,18
5507869F 0BC1 OR EAX,ECX
550786A1 8B4D B8 MOV ECX,SS:[EBP-48]
550786A4 8B55 08 MOV EDX,SS:[EBP+8]
550786A7 8A4C0A 1A MOV CL,DS:[EDX+ECX+1A]
550786AB 81E1 FF000000 AND ECX,FF
550786B1 C1E1 10 SHL ECX,10
550786B4 0BC1 OR EAX,ECX
550786B6 8B4D B8 MOV ECX,SS:[EBP-48]
550786B9 8B55 08 MOV EDX,SS:[EBP+8]
550786BC 8A4C0A 18 MOV CL,DS:[EDX+ECX+18]
550786C0 81E1 FF000000 AND ECX,FF
550786C6 0BC1 OR EAX,ECX
550786C8 8B4D BC MOV ECX,SS:[EBP-44]
550786CB 89448D C0 MOV SS:[EBP+ECX*4-40],EAX
550786CF EB 9C JMP SHORT 5507866D
550786D1 8D45 C0 LEA EAX,SS:[EBP-40]
550786D4 50 PUSH EAX
550786D5 8B45 08 MOV EAX,SS:[EBP+8]
550786D8 83C0 08 ADD EAX,8
550786DB 50 PUSH EAX
550786DC E8 74010000 CALL 55078855
550786E1 83C4 08 ADD ESP,8
550786E4 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
550786EB E9 3BFFFFFF JMP 5507862B
550786F0 EB 00 JMP SHORT 550786F2
550786F2 5F POP EDI
550786F3 5E POP ESI
550786F4 5B POP EBX
550786F5 C9 LEAVE
550786F6 C3 RETN
550786F7 55 PUSH EBP
550786F8 8BEC MOV EBP,ESP
550786FA 83EC 50 SUB ESP,50
550786FD 53 PUSH EBX
550786FE 56 PUSH ESI
550786FF 57 PUSH EDI
55078700 8B45 08 MOV EAX,SS:[EBP+8]
55078703 8B00 MOV EAX,DS:[EAX]
55078705 8945 F8 MOV SS:[EBP-8],EAX
55078708 8B45 08 MOV EAX,SS:[EBP+8]
5507870B 8B40 04 MOV EAX,DS:[EAX+4]
5507870E 8945 FC MOV SS:[EBP-4],EAX
55078711 8B45 08 MOV EAX,SS:[EBP+8]
55078714 8B00 MOV EAX,DS:[EAX]
55078716 C1E8 03 SHR EAX,3
55078719 83E0 3F AND EAX,3F
5507871C 8945 B0 MOV SS:[EBP-50],EAX
5507871F 837D B0 38 CMP DWORD PTR SS:[EBP-50],38
55078723 7C 0D JL SHORT 55078732
55078725 B8 78000000 MOV EAX,78
5507872A 2B45 B0 SUB EAX,SS:[EBP-50]
5507872D 8945 BC MOV SS:[EBP-44],EAX
55078730 EB 0B JMP SHORT 5507873D
55078732 B8 38000000 MOV EAX,38
55078737 2B45 B0 SUB EAX,SS:[EBP-50]
5507873A 8945 BC MOV SS:[EBP-44],EAX
5507873D 8B45 BC MOV EAX,SS:[EBP-44]
55078740 50 PUSH EAX
55078741 68 68501A55 PUSH 551A5068
55078746 8B45 08 MOV EAX,SS:[EBP+8]
55078749 50 PUSH EAX
5507874A E8 67FEFFFF CALL 550785B6
5507874F 83C4 0C ADD ESP,C
55078752 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
55078759 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
55078760 EB 07 JMP SHORT 55078769
55078762 FF45 B8 INC DWORD PTR SS:[EBP-48]
55078765 8345 B4 04 ADD DWORD PTR SS:[EBP-4C],4
55078769 837D B8 0E CMP DWORD PTR SS:[EBP-48],E
5507876D 73 57 JNB SHORT 550787C6
5507876F 8B45 B4 MOV EAX,SS:[EBP-4C]
55078772 8B4D 08 MOV ECX,SS:[EBP+8]
55078775 8A4401 1A MOV AL,DS:[ECX+EAX+1A]
55078779 25 FF000000 AND EAX,FF
5507877E C1E0 10 SHL EAX,10
55078781 8B4D B4 MOV ECX,SS:[EBP-4C]
55078784 8B55 08 MOV EDX,SS:[EBP+8]
55078787 8A4C0A 1B MOV CL,DS:[EDX+ECX+1B]
5507878B 81E1 FF000000 AND ECX,FF
55078791 C1E1 18 SHL ECX,18
55078794 0BC1 OR EAX,ECX
55078796 8B4D B4 MOV ECX,SS:[EBP-4C]
55078799 8B55 08 MOV EDX,SS:[EBP+8]
5507879C 8A4C0A 19 MOV CL,DS:[EDX+ECX+19]
550787A0 81E1 FF000000 AND ECX,FF
550787A6 C1E1 08 SHL ECX,8
550787A9 0BC1 OR EAX,ECX
550787AB 8B4D B4 MOV ECX,SS:[EBP-4C]
550787AE 8B55 08 MOV EDX,SS:[EBP+8]
550787B1 8A4C0A 18 MOV CL,DS:[EDX+ECX+18]
550787B5 81E1 FF000000 AND ECX,FF
550787BB 0BC1 OR EAX,ECX
550787BD 8B4D B8 MOV ECX,SS:[EBP-48]
550787C0 89448D C0 MOV SS:[EBP+ECX*4-40],EAX
550787C4 EB 9C JMP SHORT 55078762
550787C6 8D45 C0 LEA EAX,SS:[EBP-40]
550787C9 50 PUSH EAX
550787CA 8B45 08 MOV EAX,SS:[EBP+8]
550787CD 83C0 08 ADD EAX,8
550787D0 50 PUSH EAX
550787D1 E8 7F000000 CALL 55078855
550787D6 83C4 08 ADD ESP,8
550787D9 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
550787E0 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
550787E7 EB 07 JMP SHORT 550787F0
550787E9 FF45 B8 INC DWORD PTR SS:[EBP-48]
550787EC 8345 B4 04 ADD DWORD PTR SS:[EBP-4C],4
550787F0 837D B8 04 CMP DWORD PTR SS:[EBP-48],4
550787F4 73 58 JNB SHORT 5507884E
550787F6 8B45 B8 MOV EAX,SS:[EBP-48]
550787F9 8B4D 08 MOV ECX,SS:[EBP+8]
550787FC 8A4481 08 MOV AL,DS:[ECX+EAX*4+8]
55078800 8B4D B4 MOV ECX,SS:[EBP-4C]
55078803 8B55 08 MOV EDX,SS:[EBP+8]
55078806 88440A 58 MOV DS:[EDX+ECX+58],AL
5507880A 8B45 B8 MOV EAX,SS:[EBP-48]
5507880D 8B4D 08 MOV ECX,SS:[EBP+8]
55078810 8B4481 08 MOV EAX,DS:[ECX+EAX*4+8]
55078814 8B4D B4 MOV ECX,SS:[EBP-4C]
55078817 8B55 08 MOV EDX,SS:[EBP+8]
5507881A 88640A 59 MOV DS:[EDX+ECX+59],AH
5507881E 8B45 B8 MOV EAX,SS:[EBP-48]
55078821 8B4D 08 MOV ECX,SS:[EBP+8]
55078824 8B4481 08 MOV EAX,DS:[ECX+EAX*4+8]
55078828 C1E8 10 SHR EAX,10
5507882B 8B4D B4 MOV ECX,SS:[EBP-4C]
5507882E 8B55 08 MOV EDX,SS:[EBP+8]
55078831 88440A 5A MOV DS:[EDX+ECX+5A],AL
55078835 8B45 B8 MOV EAX,SS:[EBP-48]
55078838 8B4D 08 MOV ECX,SS:[EBP+8]
5507883B 8B4481 08 MOV EAX,DS:[ECX+EAX*4+8]
5507883F C1E8 18 SHR EAX,18
55078842 8B4D B4 MOV ECX,SS:[EBP-4C]
55078845 8B55 08 MOV EDX,SS:[EBP+8]
55078848 88440A 5B MOV DS:[EDX+ECX+5B],AL
5507884C EB 9B JMP SHORT 550787E9
5507884E EB 00 JMP SHORT 55078850
55078850 5F POP EDI
55078851 5E POP ESI
55078852 5B POP EBX
55078853 C9 LEAVE
55078854 C3 RETN
55078855 55 PUSH EBP
55078856 8BEC MOV EBP,ESP
55078858 83EC 10 SUB ESP,10
5507885B 53 PUSH EBX
5507885C 56 PUSH ESI
5507885D 57 PUSH EDI
5507885E 8B45 08 MOV EAX,SS:[EBP+8]
55078861 8B00 MOV EAX,DS:[EAX]
55078863 8945 FC MOV SS:[EBP-4],EAX
55078866 8B45 08 MOV EAX,SS:[EBP+8]
55078869 8B40 04 MOV EAX,DS:[EAX+4]
5507886C 8945 F8 MOV SS:[EBP-8],EAX
5507886F 8B45 08 MOV EAX,SS:[EBP+8]
55078872 8B40 08 MOV EAX,DS:[EAX+8]
55078875 8945 F4 MOV SS:[EBP-C],EAX
55078878 8B45 08 MOV EAX,SS:[EBP+8]
5507887B 8B40 0C MOV EAX,DS:[EAX+C]
5507887E 8945 F0 MOV SS:[EBP-10],EAX
55078881 8B45 F8 MOV EAX,SS:[EBP-8]
55078884 F7D0 NOT EAX
55078886 2345 F0 AND EAX,SS:[EBP-10]
55078889 8B4D F4 MOV ECX,SS:[EBP-C]
5507888C 234D F8 AND ECX,SS:[EBP-8]
5507888F 0BC1 OR EAX,ECX
55078891 8B4D 0C MOV ECX,SS:[EBP+C]
55078894 0301 ADD EAX,DS:[ECX]
55078896 2D 885B9528 SUB EAX,28955B88
5507889B 0145 FC ADD SS:[EBP-4],EAX
5507889E 8B45 FC MOV EAX,SS:[EBP-4]
550788A1 C1E0 07 SHL EAX,7
550788A4 8B4D FC MOV ECX,SS:[EBP-4]
550788A7 C1E9 19 SHR ECX,19
550788AA 0BC1 OR EAX,ECX
550788AC 8945 FC MOV SS:[EBP-4],EAX
550788AF 8B45 F8 MOV EAX,SS:[EBP-8]
550788B2 0145 FC ADD SS:[EBP-4],EAX
550788B5 8B45 FC MOV EAX,SS:[EBP-4]
550788B8 F7D0 NOT EAX
550788BA 2345 F4 AND EAX,SS:[EBP-C]
550788BD 8B4D F8 MOV ECX,SS:[EBP-8]
550788C0 234D FC AND ECX,SS:[EBP-4]
550788C3 0BC1 OR EAX,ECX
550788C5 8B4D 0C MOV ECX,SS:[EBP+C]
550788C8 0341 04 ADD EAX,DS:[ECX+4]
550788CB 2D AA483817 SUB EAX,173848AA
550788D0 0145 F0 ADD SS:[EBP-10],EAX
550788D3 8B45 F0 MOV EAX,SS:[EBP-10]
550788D6 C1E0 0C SHL EAX,C
550788D9 8B4D F0 MOV ECX,SS:[EBP-10]
550788DC C1E9 14 SHR ECX,14
550788DF 0BC1 OR EAX,ECX
550788E1 8945 F0 MOV SS:[EBP-10],EAX
550788E4 8B45 FC MOV EAX,SS:[EBP-4]
550788E7 0145 F0 ADD SS:[EBP-10],EAX
550788EA 8B45 F0 MOV EAX,SS:[EBP-10]
550788ED F7D0 NOT EAX
550788EF 2345 F8 AND EAX,SS:[EBP-8]
550788F2 8B4D FC MOV ECX,SS:[EBP-4]
550788F5 234D F0 AND ECX,SS:[EBP-10]
550788F8 0BC1 OR EAX,ECX
550788FA 8B4D 0C MOV ECX,SS:[EBP+C]
550788FD 0341 08 ADD EAX,DS:[ECX+8]
55078900 05 DB702024 ADD EAX,242070DB
55078905 0145 F4 ADD SS:[EBP-C],EAX
55078908 8B45 F4 MOV EAX,SS:[EBP-C]
5507890B C1E0 11 SHL EAX,11
5507890E 8B4D F4 MOV ECX,SS:[EBP-C]
55078911 C1E9 0F SHR ECX,F
55078914 0BC1 OR EAX,ECX
55078916 8945 F4 MOV SS:[EBP-C],EAX
55078919 8B45 F0 MOV EAX,SS:[EBP-10]
5507891C 0145 F4 ADD SS:[EBP-C],EAX
5507891F 8B45 F4 MOV EAX,SS:[EBP-C]
55078922 F7D0 NOT EAX
55078924 2345 FC AND EAX,SS:[EBP-4]
55078927 8B4D F4 MOV ECX,SS:[EBP-C]
5507892A 234D F0 AND ECX,SS:[EBP-10]
5507892D 0BC1 OR EAX,ECX
5507892F 8B4D 0C MOV ECX,SS:[EBP+C]
55078932 0341 0C ADD EAX,DS:[ECX+C]
55078935 2D 1231423E SUB EAX,3E423112
5507893A 0145 F8 ADD SS:[EBP-8],EAX
5507893D 8B45 F8 MOV EAX,SS:[EBP-8]
55078940 C1E8 0A SHR EAX,A
55078943 8B4D F8 MOV ECX,SS:[EBP-8]
55078946 C1E1 16 SHL ECX,16
55078949 0BC1 OR EAX,ECX
5507894B 8945 F8 MOV SS:[EBP-8],EAX
5507894E 8B45 F4 MOV EAX,SS:[EBP-C]
55078951 0145 F8 ADD SS:[EBP-8],EAX
55078954 8B45 F8 MOV EAX,SS:[EBP-8]
55078957 F7D0 NOT EAX
55078959 2345 F0 AND EAX,SS:[EBP-10]
5507895C 8B4D F4 MOV ECX,SS:[EBP-C]
5507895F 234D F8 AND ECX,SS:[EBP-8]
55078962 0BC1 OR EAX,ECX
55078964 8B4D 0C MOV ECX,SS:[EBP+C]
55078967 0341 10 ADD EAX,DS:[ECX+10]
5507896A 2D 51F0830A SUB EAX,A83F051
5507896F 0145 FC ADD SS:[EBP-4],EAX
55078972 8B45 FC MOV EAX,SS:[EBP-4]
55078975 C1E0 07 SHL EAX,7
55078978 8B4D FC MOV ECX,SS:[EBP-4]
5507897B C1E9 19 SHR ECX,19
5507897E 0BC1 OR EAX,ECX
55078980 8945 FC MOV SS:[EBP-4],EAX
55078983 8B45 F8 MOV EAX,SS:[EBP-8]
55078986 0145 FC ADD SS:[EBP-4],EAX
55078989 8B45 FC MOV EAX,SS:[EBP-4]
5507898C F7D0 NOT EAX
5507898E 2345 F4 AND EAX,SS:[EBP-C]
55078991 8B4D F8 MOV ECX,SS:[EBP-8]
55078994 234D FC AND ECX,SS:[EBP-4]
55078997 0BC1 OR EAX,ECX
55078999 8B4D 0C MOV ECX,SS:[EBP+C]
5507899C 0341 14 ADD EAX,DS:[ECX+14]
5507899F 05 2AC68747 ADD EAX,4787C62A
550789A4 0145 F0 ADD SS:[EBP-10],EAX
550789A7 8B45 F0 MOV EAX,SS:[EBP-10]
550789AA C1E0 0C SHL EAX,C
550789AD 8B4D F0 MOV ECX,SS:[EBP-10]
550789B0 C1E9 14 SHR ECX,14
550789B3 0BC1 OR EAX,ECX
550789B5 8945 F0 MOV SS:[EBP-10],EAX
550789B8 8B45 FC MOV EAX,SS:[EBP-4]
550789BB 0145 F0 ADD SS:[EBP-10],EAX
550789BE 8B45 F0 MOV EAX,SS:[EBP-10]
550789C1 F7D0 NOT EAX
550789C3 2345 F8 AND EAX,SS:[EBP-8]
550789C6 8B4D FC MOV ECX,SS:[EBP-4]
550789C9 234D F0 AND ECX,SS:[EBP-10]
550789CC 0BC1 OR EAX,ECX
550789CE 8B4D 0C MOV ECX,SS:[EBP+C]
550789D1 0341 18 ADD EAX,DS:[ECX+18]
550789D4 2D EDB9CF57 SUB EAX,57CFB9ED
550789D9 0145 F4 ADD SS:[EBP-C],EAX
550789DC 8B45 F4 MOV EAX,SS:[EBP-C]
550789DF C1E0 11 SHL EAX,11
550789E2 8B4D F4 MOV ECX,SS:[EBP-C]
550789E5 C1E9 0F SHR ECX,F
550789E8 0BC1 OR EAX,ECX
550789EA 8945 F4 MOV SS:[EBP-C],EAX
550789ED 8B45 F0 MOV EAX,SS:[EBP-10]
550789F0 0145 F4 ADD SS:[EBP-C],EAX
550789F3 8B45 F4 MOV EAX,SS:[EBP-C]
550789F6 F7D0 NOT EAX
550789F8 2345 FC AND EAX,SS:[EBP-4]
550789FB 8B4D F4 MOV ECX,SS:[EBP-C]
550789FE 234D F0 AND ECX,SS:[EBP-10]
55078A01 0BC1 OR EAX,ECX
55078A03 8B4D 0C MOV ECX,SS:[EBP+C]
55078A06 0341 1C ADD EAX,DS:[ECX+1C]
55078A09 2D FF6AB902 SUB EAX,2B96AFF
55078A0E 0145 F8 ADD SS:[EBP-8],EAX
55078A11 8B45 F8 MOV EAX,SS:[EBP-8]
55078A14 C1E8 0A SHR EAX,A
55078A17 8B4D F8 MOV ECX,SS:[EBP-8]
55078A1A C1E1 16 SHL ECX,16
55078A1D 0BC1 OR EAX,ECX
55078A1F 8945 F8 MOV SS:[EBP-8],EAX
55078A22 8B45 F4 MOV EAX,SS:[EBP-C]
55078A25 0145 F8 ADD SS:[EBP-8],EAX
55078A28 8B45 F8 MOV EAX,SS:[EBP-8]
55078A2B F7D0 NOT EAX
55078A2D 2345 F0 AND EAX,SS:[EBP-10]
55078A30 8B4D F4 MOV ECX,SS:[EBP-C]
55078A33 234D F8 AND ECX,SS:[EBP-8]
55078A36 0BC1 OR EAX,ECX
55078A38 8B4D 0C MOV ECX,SS:[EBP+C]
55078A3B 0341 20 ADD EAX,DS:[ECX+20]
55078A3E 05 D8988069 ADD EAX,698098D8
55078A43 0145 FC ADD SS:[EBP-4],EAX
55078A46 8B45 FC MOV EAX,SS:[EBP-4]
55078A49 C1E0 07 SHL EAX,7
55078A4C 8B4D FC MOV ECX,SS:[EBP-4]
55078A4F C1E9 19 SHR ECX,19
55078A52 0BC1 OR EAX,ECX
55078A54 8945 FC MOV SS:[EBP-4],EAX
55078A57 8B45 F8 MOV EAX,SS:[EBP-8]
55078A5A 0145 FC ADD SS:[EBP-4],EAX
55078A5D 8B45 FC MOV EAX,SS:[EBP-4]
55078A60 F7D0 NOT EAX
55078A62 2345 F4 AND EAX,SS:[EBP-C]
55078A65 8B4D F8 MOV ECX,SS:[EBP-8]
55078A68 234D FC AND ECX,SS:[EBP-4]
55078A6B 0BC1 OR EAX,ECX
55078A6D 8B4D 0C MOV ECX,SS:[EBP+C]
55078A70 0341 24 ADD EAX,DS:[ECX+24]
55078A73 2D 5108BB74 SUB EAX,74BB0851
55078A78 0145 F0 ADD SS:[EBP-10],EAX
55078A7B 8B45 F0 MOV EAX,SS:[EBP-10]
55078A7E C1E0 0C SHL EAX,C
55078A81 8B4D F0 MOV ECX,SS:[EBP-10]
55078A84 C1E9 14 SHR ECX,14
55078A87 0BC1 OR EAX,ECX
55078A89 8945 F0 MOV SS:[EBP-10],EAX
55078A8C 8B45 FC MOV EAX,SS:[EBP-4]
55078A8F 0145 F0 ADD SS:[EBP-10],EAX
55078A92 8B45 F0 MOV EAX,SS:[EBP-10]
55078A95 F7D0 NOT EAX
55078A97 2345 F8 AND EAX,SS:[EBP-8]
55078A9A 8B4D FC MOV ECX,SS:[EBP-4]
55078A9D 234D F0 AND ECX,SS:[EBP-10]
55078AA0 0BC1 OR EAX,ECX
55078AA2 8B4D 0C MOV ECX,SS:[EBP+C]
55078AA5 0341 28 ADD EAX,DS:[ECX+28]
55078AA8 2D 4FA40000 SUB EAX,A44F
55078AAD 0145 F4 ADD SS:[EBP-C],EAX
55078AB0 8B45 F4 MOV EAX,SS:[EBP-C]
55078AB3 C1E0 11 SHL EAX,11
55078AB6 8B4D F4 MOV ECX,SS:[EBP-C]
55078AB9 C1E9 0F SHR ECX,F
55078ABC 0BC1 OR EAX,ECX
55078ABE 8945 F4 MOV SS:[EBP-C],EAX
55078AC1 8B45 F0 MOV EAX,SS:[EBP-10]
55078AC4 0145 F4 ADD SS:[EBP-C],EAX
55078AC7 8B45 F4 MOV EAX,SS:[EBP-C]
55078ACA F7D0 NOT EAX
55078ACC 2345 FC AND EAX,SS:[EBP-4]
55078ACF 8B4D F4 MOV ECX,SS:[EBP-C]
55078AD2 234D F0 AND ECX,SS:[EBP-10]
55078AD5 0BC1 OR EAX,ECX
55078AD7 8B4D 0C MOV ECX,SS:[EBP+C]
55078ADA 0341 2C ADD EAX,DS:[ECX+2C]
55078ADD 2D 4228A376 SUB EAX,76A32842
55078AE2 0145 F8 ADD SS:[EBP-8],EAX
55078AE5 8B45 F8 MOV EAX,SS:[EBP-8]
55078AE8 C1E8 0A SHR EAX,A
55078AEB 8B4D F8 MOV ECX,SS:[EBP-8]
55078AEE C1E1 16 SHL ECX,16
55078AF1 0BC1 OR EAX,ECX
55078AF3 8945 F8 MOV SS:[EBP-8],EAX
55078AF6 8B45 F4 MOV EAX,SS:[EBP-C]
55078AF9 0145 F8 ADD SS:[EBP-8],EAX
55078AFC 8B45 F8 MOV EAX,SS:[EBP-8]
55078AFF F7D0 NOT EAX
55078B01 2345 F0 AND EAX,SS:[EBP-10]
55078B04 8B4D F4 MOV ECX,SS:[EBP-C]
55078B07 234D F8 AND ECX,SS:[EBP-8]
55078B0A 0BC1 OR EAX,ECX
55078B0C 8B4D 0C MOV ECX,SS:[EBP+C]
55078B0F 0341 30 ADD EAX,DS:[ECX+30]
55078B12 05 2211906B ADD EAX,6B901122
55078B17 0145 FC ADD SS:[EBP-4],EAX
55078B1A 8B45 FC MOV EAX,SS:[EBP-4]
55078B1D C1E0 07 SHL EAX,7
55078B20 8B4D FC MOV ECX,SS:[EBP-4]
55078B23 C1E9 19 SHR ECX,19
55078B26 0BC1 OR EAX,ECX
55078B28 8945 FC MOV SS:[EBP-4],EAX
55078B2B 8B45 F8 MOV EAX,SS:[EBP-8]
55078B2E 0145 FC ADD SS:[EBP-4],EAX
55078B31 8B45 FC MOV EAX,SS:[EBP-4]
55078B34 F7D0 NOT EAX
55078B36 2345 F4 AND EAX,SS:[EBP-C]
55078B39 8B4D F8 MOV ECX,SS:[EBP-8]
55078B3C 234D FC AND ECX,SS:[EBP-4]
55078B3F 0BC1 OR EAX,ECX
55078B41 8B4D 0C MOV ECX,SS:[EBP+C]
55078B44 0341 34 ADD EAX,DS:[ECX+34]
55078B47 2D 6D8E6702 SUB EAX,2678E6D
地址 十六进制 反汇编
---------------------------------------------------------------
55078110 55 PUSH EBP
55078111 8BEC MOV EBP,ESP
55078113 51 PUSH ECX
55078114 56 PUSH ESI
55078115 57 PUSH EDI
55078116 E8 95C0FFFF CALL dongle_MT.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507811B 8BF0 MOV ESI,EAX
5507811D 85F6 TEST ESI,ESI
5507811F 75 07 JNZ SHORT 55078128
55078121 BF 06090000 MOV EDI,906
55078126 EB 5C JMP SHORT 55078184
55078128 8B45 14 MOV EAX,SS:[EBP+14]
5507812B 83E8 00 SUB EAX,0
5507812E 74 08 JE SHORT 55078138
55078130 48 DEC EAX
55078131 B8 0E000000 MOV EAX,E
55078136 74 05 JE SHORT 5507813D
55078138 B8 09000000 MOV EAX,9
5507813D 8B16 MOV EDX,DS:[ESI]
5507813F 50 PUSH EAX
55078140 8B42 08 MOV EAX,DS:[EDX+8]
55078143 6A 00 PUSH 0
55078145 6A 00 PUSH 0
55078147 6A 00 PUSH 0
55078149 6A 00 PUSH 0
5507814B 8BCE MOV ECX,ESI
5507814D FFD0 CALL EAX
5507814F 8BF8 MOV EDI,EAX
55078151 85FF TEST EDI,EDI
55078153 75 2F JNZ SHORT 55078184
55078155 8B16 MOV EDX,DS:[ESI]
55078157 8B52 14 MOV EDX,DS:[EDX+14]
5507815A 8D45 FC LEA EAX,SS:[EBP-4]
5507815D 50 PUSH EAX
5507815E 8BCE MOV ECX,ESI
55078160 FFD2 CALL EDX
55078162 85C0 TEST EAX,EAX
55078164 75 07 JNZ SHORT 5507816D
55078166 BF 07090000 MOV EDI,907
5507816B EB 17 JMP SHORT 55078184
5507816D 8B4D 10 MOV ECX,SS:[EBP+10]
55078170 8B10 MOV EDX,DS:[EAX]
55078172 8B52 20 MOV EDX,DS:[EDX+20]
55078175 51 PUSH ECX
55078176 8B4D 0C MOV ECX,SS:[EBP+C]
55078179 51 PUSH ECX
5507817A 8B4D 08 MOV ECX,SS:[EBP+8]
5507817D 51 PUSH ECX
5507817E 8BC8 MOV ECX,EAX
55078180 FFD2 CALL EDX
55078182 8BF8 MOV EDI,EAX
55078184 8B06 MOV EAX,DS:[ESI]
55078186 8B50 10 MOV EDX,DS:[EAX+10]
55078189 8BCE MOV ECX,ESI
5507818B FFD2 CALL EDX
5507818D 56 PUSH ESI
5507818E E8 9DBBFFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
55078193 83C4 04 ADD ESP,4
55078196 8BC7 MOV EAX,EDI
55078198 5F POP EDI
55078199 5E POP ESI
5507819A 8BE5 MOV ESP,EBP
5507819C 5D POP EBP
5507819D C3 RETN
5507819E CC INT3
5507819F CC INT3
550781A0 55 PUSH EBP
550781A1 8BEC MOV EBP,ESP
550781A3 83EC 14 SUB ESP,14
550781A6 837D 08 00 CMP DWORD PTR SS:[EBP+8],0
550781AA 75 09 JNZ SHORT 550781B5
550781AC B8 05020000 MOV EAX,205
550781B1 8BE5 MOV ESP,EBP
550781B3 5D POP EBP
550781B4 C3 RETN
550781B5 53 PUSH EBX
550781B6 33DB XOR EBX,EBX
550781B8 57 PUSH EDI
550781B9 895D FC MOV SS:[EBP-4],EBX
550781BC E8 EFBFFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
550781C1 8BF8 MOV EDI,EAX
550781C3 897D F0 MOV SS:[EBP-10],EDI
550781C6 85FF TEST EDI,EDI
550781C8 75 0C JNZ SHORT 550781D6
550781CA C745 F8 06090000MOV DWORD PTR SS:[EBP-8],906
550781D1 E9 76010000 JMP 5507834C
550781D6 8B45 0C MOV EAX,SS:[EBP+C]
550781D9 83E8 00 SUB EAX,0
550781DC 74 08 JE SHORT 550781E6
550781DE 48 DEC EAX
550781DF B8 0E000000 MOV EAX,E
550781E4 74 05 JE SHORT 550781EB
550781E6 B8 09000000 MOV EAX,9
550781EB 8B17 MOV EDX,DS:[EDI]
550781ED 50 PUSH EAX
550781EE 8B42 04 MOV EAX,DS:[EDX+4]
550781F1 6A 00 PUSH 0
550781F3 6A 00 PUSH 0
550781F5 6A 00 PUSH 0
550781F7 6A 00 PUSH 0
550781F9 8BCF MOV ECX,EDI
550781FB FFD0 CALL EAX
550781FD 8945 F8 MOV SS:[EBP-8],EAX
55078200 85C0 TEST EAX,EAX
55078202 0F85 44010000 JNZ 5507834C
55078208 8B17 MOV EDX,DS:[EDI]
5507820A 8B52 14 MOV EDX,DS:[EDX+14]
5507820D 8D45 EC LEA EAX,SS:[EBP-14]
55078210 50 PUSH EAX
55078211 8BCF MOV ECX,EDI
55078213 FFD2 CALL EDX
55078215 8945 F4 MOV SS:[EBP-C],EAX
55078218 85C0 TEST EAX,EAX
5507821A 75 0B JNZ SHORT 55078227
5507821C 5F POP EDI
5507821D B8 07090000 MOV EAX,907
55078222 5B POP EBX
55078223 8BE5 MOV ESP,EBP
55078225 5D POP EBP
55078226 C3 RETN
55078227 56 PUSH ESI
55078228 EB 09 JMP SHORT 55078233
5507822A 8D9B 00000000 LEA EBX,DS:[EBX]
55078230 8B45 F4 MOV EAX,SS:[EBP-C]
55078233 8B10 MOV EDX,DS:[EAX]
55078235 8BC8 MOV ECX,EAX
55078237 8B42 04 MOV EAX,DS:[EDX+4]
5507823A FFD0 CALL EAX
5507823C 8BF0 MOV ESI,EAX
5507823E 8B16 MOV EDX,DS:[ESI]
55078240 8B02 MOV EAX,DS:[EDX]
55078242 8BCE MOV ECX,ESI
55078244 FFD0 CALL EAX
55078246 83F8 01 CMP EAX,1
55078249 75 7E JNZ SHORT 550782C9
5507824B 8B16 MOV EDX,DS:[ESI]
5507824D 8B42 10 MOV EAX,DS:[EDX+10]
55078250 8BCE MOV ECX,ESI
55078252 FFD0 CALL EAX
55078254 8BF0 MOV ESI,EAX
55078256 8B16 MOV EDX,DS:[ESI]
55078258 8B42 04 MOV EAX,DS:[EDX+4]
5507825B 8BCE MOV ECX,ESI
5507825D 33DB XOR EBX,EBX
5507825F FFD0 CALL EAX
55078261 85C0 TEST EAX,EAX
55078263 7E 5D JLE SHORT 550782C2
55078265 8B16 MOV EDX,DS:[ESI]
55078267 8B42 08 MOV EAX,DS:[EDX+8]
5507826A 53 PUSH EBX
5507826B 8BCE MOV ECX,ESI
5507826D FFD0 CALL EAX
5507826F 8BF8 MOV EDI,EAX
55078271 8B17 MOV EDX,DS:[EDI]
55078273 8B42 08 MOV EAX,DS:[EDX+8]
55078276 8BCF MOV ECX,EDI
55078278 FFD0 CALL EAX
5507827A 85C0 TEST EAX,EAX
5507827C 74 2E JE SHORT 550782AC
5507827E 8BC8 MOV ECX,EAX
55078280 8B45 08 MOV EAX,SS:[EBP+8]
55078283 8A10 MOV DL,DS:[EAX]
55078285 3A11 CMP DL,DS:[ECX]
55078287 75 1A JNZ SHORT 550782A3
55078289 84D2 TEST DL,DL
5507828B 74 12 JE SHORT 5507829F
5507828D 8A50 01 MOV DL,DS:[EAX+1]
55078290 3A51 01 CMP DL,DS:[ECX+1]
55078293 75 0E JNZ SHORT 550782A3
55078295 83C0 02 ADD EAX,2
55078298 83C1 02 ADD ECX,2
5507829B 84D2 TEST DL,DL
5507829D 75 E4 JNZ SHORT 55078283
5507829F 33C0 XOR EAX,EAX
550782A1 EB 05 JMP SHORT 550782A8
550782A3 1BC0 SBB EAX,EAX
550782A5 83D8 FF SBB EAX,-1
550782A8 85C0 TEST EAX,EAX
550782AA 74 10 JE SHORT 550782BC
550782AC 8B16 MOV EDX,DS:[ESI]
550782AE 8B42 04 MOV EAX,DS:[EDX+4]
550782B1 8BCE MOV ECX,ESI
550782B3 43 INC EBX
550782B4 FFD0 CALL EAX
550782B6 3BD8 CMP EBX,EAX
550782B8 7C AB JL SHORT 55078265
550782BA EB 03 JMP SHORT 550782BF
550782BC 897D FC MOV SS:[EBP-4],EDI
550782BF 8B7D F0 MOV EDI,SS:[EBP-10]
550782C2 8B5D FC MOV EBX,SS:[EBP-4]
550782C5 85DB TEST EBX,EBX
550782C7 75 25 JNZ SHORT 550782EE
550782C9 8B17 MOV EDX,DS:[EDI]
550782CB 8B45 EC MOV EAX,SS:[EBP-14]
550782CE 8B52 18 MOV EDX,DS:[EDX+18]
550782D1 50 PUSH EAX
550782D2 8BCF MOV ECX,EDI
550782D4 FFD2 CALL EDX
550782D6 8945 F4 MOV SS:[EBP-C],EAX
550782D9 85C0 TEST EAX,EAX
550782DB 0F85 4FFFFFFF JNZ 55078230
550782E1 85DB TEST EBX,EBX
550782E3 75 09 JNZ SHORT 550782EE
550782E5 C745 F8 05090000MOV DWORD PTR SS:[EBP-8],905
550782EC EB 5D JMP SHORT 5507834B
550782EE 8B45 0C MOV EAX,SS:[EBP+C]
550782F1 83F8 04 CMP EAX,4
550782F4 77 55 JA SHORT 5507834B
550782F6 FF2485 68830755JMP DS:[EAX*4+55078368]
550782FD 8B03 MOV EAX,DS:[EBX]
550782FF 8B50 20 MOV EDX,DS:[EAX+20]
55078302 8BCB MOV ECX,EBX
55078304 FFD2 CALL EDX
55078306 EB 3E JMP SHORT 55078346
55078308 8B4D F4 MOV ECX,SS:[EBP-C]
5507830B 8B11 MOV EDX,DS:[ECX]
5507830D 8B02 MOV EAX,DS:[EDX]
5507830F 6A 00 PUSH 0
55078311 FFD0 CALL EAX
55078313 8B10 MOV EDX,DS:[EAX]
55078315 8BC8 MOV ECX,EAX
55078317 8B42 18 MOV EAX,DS:[EDX+18]
5507831A FFD0 CALL EAX
5507831C EB 28 JMP SHORT 55078346
5507831E C745 F8 03000000MOV DWORD PTR SS:[EBP-8],3
55078325 EB 24 JMP SHORT 5507834B
55078327 8B13 MOV EDX,DS:[EBX]
55078329 8B42 40 MOV EAX,DS:[EDX+40]
5507832C 8BCB MOV ECX,EBX
5507832E FFD0 CALL EAX
55078330 8B55 10 MOV EDX,SS:[EBP+10]
55078333 0FB7C8 MOVZX ECX,AX
55078336 890A MOV DS:[EDX],ECX
55078338 EB 11 JMP SHORT 5507834B
5507833A 8B03 MOV EAX,DS:[EBX]
5507833C 8B50 54 MOV EDX,DS:[EAX+54]
5507833F 8BCB MOV ECX,EBX
55078341 FFD2 CALL EDX
55078343 0FB7C0 MOVZX EAX,AX
55078346 8B4D 10 MOV ECX,SS:[EBP+10]
55078349 8901 MOV DS:[ECX],EAX
5507834B 5E POP ESI
5507834C 8B17 MOV EDX,DS:[EDI]
5507834E 8B42 10 MOV EAX,DS:[EDX+10]
55078351 8BCF MOV ECX,EDI
55078353 FFD0 CALL EAX
55078355 57 PUSH EDI
55078356 E8 D5B9FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
5507835B 8B45 F8 MOV EAX,SS:[EBP-8]
5507835E 83C4 04 ADD ESP,4
55078361 5F POP EDI
55078362 5B POP EBX
55078363 8BE5 MOV ESP,EBP
55078365 5D POP EBP
55078366 C3 RETN
55078367 90 NOP
55078368 0883 0755FD82 OR DS:[EBX+82FD5507],AL
5507836E 07 POP ES
5507836F 55 PUSH EBP
55078370 1E PUSH DS
55078371 8307 55 ADD DWORD PTR DS:[EDI],55
55078374 27 DAA
55078375 8307 55 ADD DWORD PTR DS:[EDI],55
55078378 3A83 0755CCCC CMP AL,DS:[EBX+CCCC5507]
5507837E CC INT3
5507837F CC INT3
55078380 55 PUSH EBP
55078381 8BEC MOV EBP,ESP
55078383 51 PUSH ECX
55078384 56 PUSH ESI
55078385 57 PUSH EDI
55078386 E8 25BEFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507838B 8BF0 MOV ESI,EAX
5507838D 85F6 TEST ESI,ESI
5507838F 75 07 JNZ SHORT 55078398
55078391 BF 06090000 MOV EDI,906
55078396 EB 74 JMP SHORT 5507840C
55078398 8B45 0C MOV EAX,SS:[EBP+C]
5507839B 83E8 00 SUB EAX,0
5507839E 74 08 JE SHORT 550783A8
550783A0 48 DEC EAX
550783A1 B8 0E000000 MOV EAX,E
550783A6 74 05 JE SHORT 550783AD
550783A8 B8 09000000 MOV EAX,9
550783AD 8B16 MOV EDX,DS:[ESI]
550783AF 50 PUSH EAX
550783B0 8B42 08 MOV EAX,DS:[EDX+8]
550783B3 6A 00 PUSH 0
550783B5 6A 00 PUSH 0
550783B7 6A 00 PUSH 0
550783B9 6A 00 PUSH 0
550783BB 8BCE MOV ECX,ESI
550783BD FFD0 CALL EAX
550783BF 8BF8 MOV EDI,EAX
550783C1 85FF TEST EDI,EDI
550783C3 75 47 JNZ SHORT 5507840C
550783C5 8B16 MOV EDX,DS:[ESI]
550783C7 8B52 14 MOV EDX,DS:[EDX+14]
550783CA 8D45 FC LEA EAX,SS:[EBP-4]
550783CD 50 PUSH EAX
550783CE 8BCE MOV ECX,ESI
550783D0 FFD2 CALL EDX
550783D2 8BF8 MOV EDI,EAX
550783D4 85FF TEST EDI,EDI
550783D6 75 07 JNZ SHORT 550783DF
550783D8 BF 07090000 MOV EDI,907
550783DD EB 2D JMP SHORT 5507840C
550783DF 8B07 MOV EAX,DS:[EDI]
550783E1 8B10 MOV EDX,DS:[EAX]
550783E3 6A 00 PUSH 0
550783E5 8BCF MOV ECX,EDI
550783E7 FFD2 CALL EDX
550783E9 8B10 MOV EDX,DS:[EAX]
550783EB 8BC8 MOV ECX,EAX
550783ED 8B42 24 MOV EAX,DS:[EDX+24]
550783F0 FFD0 CALL EAX
550783F2 84C0 TEST AL,AL
550783F4 74 11 JE SHORT 55078407
550783F6 8B17 MOV EDX,DS:[EDI]
550783F8 8B45 08 MOV EAX,SS:[EBP+8]
550783FB 8B52 10 MOV EDX,DS:[EDX+10]
550783FE 50 PUSH EAX
550783FF 8BCF MOV ECX,EDI
55078401 FFD2 CALL EDX
55078403 8BF8 MOV EDI,EAX
55078405 EB 05 JMP SHORT 5507840C
55078407 BF 03000000 MOV EDI,3
5507840C 8B06 MOV EAX,DS:[ESI]
5507840E 8B50 10 MOV EDX,DS:[EAX+10]
55078411 8BCE MOV ECX,ESI
55078413 FFD2 CALL EDX
55078415 56 PUSH ESI
55078416 E8 15B9FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
5507841B 83C4 04 ADD ESP,4
5507841E 8BC7 MOV EAX,EDI
55078420 5F POP EDI
55078421 5E POP ESI
55078422 8BE5 MOV ESP,EBP
55078424 5D POP EBP
55078425 C3 RETN
55078426 CC INT3
55078427 CC INT3
55078428 CC INT3
55078429 CC INT3
5507842A CC INT3
5507842B CC INT3
5507842C CC INT3
5507842D CC INT3
5507842E CC INT3
5507842F CC INT3
55078430 55 PUSH EBP
55078431 8BEC MOV EBP,ESP
55078433 53 PUSH EBX
55078434 8B5D 08 MOV EBX,SS:[EBP+8]
55078437 85DB TEST EBX,EBX
55078439 75 08 JNZ SHORT 55078443
5507843B B8 05020000 MOV EAX,205
55078440 5B POP EBX
55078441 5D POP EBP
55078442 C3 RETN
55078443 56 PUSH ESI
55078444 57 PUSH EDI
55078445 E8 66BDFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
5507844A 8BF0 MOV ESI,EAX
5507844C 85F6 TEST ESI,ESI
5507844E 75 07 JNZ SHORT 55078457
55078450 BF 06090000 MOV EDI,906
55078455 EB 5A JMP SHORT 550784B1
55078457 8B45 0C MOV EAX,SS:[EBP+C]
5507845A 83E8 00 SUB EAX,0
5507845D 74 08 JE SHORT 55078467
5507845F 48 DEC EAX
55078460 B8 0E000000 MOV EAX,E
55078465 74 05 JE SHORT 5507846C
55078467 B8 09000000 MOV EAX,9
5507846C 8B16 MOV EDX,DS:[ESI]
5507846E 50 PUSH EAX
5507846F 8B42 08 MOV EAX,DS:[EDX+8]
55078472 6A 00 PUSH 0
55078474 6A 00 PUSH 0
55078476 6A 00 PUSH 0
55078478 6A 00 PUSH 0
5507847A 8BCE MOV ECX,ESI
5507847C FFD0 CALL EAX
5507847E 8BF8 MOV EDI,EAX
55078480 85FF TEST EDI,EDI
55078482 75 2D JNZ SHORT 550784B1
55078484 8B16 MOV EDX,DS:[ESI]
55078486 8B52 14 MOV EDX,DS:[EDX+14]
55078489 8D45 08 LEA EAX,SS:[EBP+8]
5507848C 50 PUSH EAX
5507848D 8BCE MOV ECX,ESI
5507848F FFD2 CALL EDX
55078491 85C0 TEST EAX,EAX
55078493 75 07 JNZ SHORT 5507849C
55078495 BF 07090000 MOV EDI,907
5507849A EB 15 JMP SHORT 550784B1
5507849C 8B10 MOV EDX,DS:[EAX]
5507849E 8BC8 MOV ECX,EAX
550784A0 8B02 MOV EAX,DS:[EDX]
550784A2 6A 00 PUSH 0
550784A4 FFD0 CALL EAX
550784A6 8B10 MOV EDX,DS:[EAX]
550784A8 8BC8 MOV ECX,EAX
550784AA 8B42 18 MOV EAX,DS:[EDX+18]
550784AD FFD0 CALL EAX
550784AF 8903 MOV DS:[EBX],EAX
550784B1 8B16 MOV EDX,DS:[ESI]
550784B3 8B42 10 MOV EAX,DS:[EDX+10]
550784B6 8BCE MOV ECX,ESI
550784B8 FFD0 CALL EAX
550784BA 56 PUSH ESI
550784BB E8 70B8FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
550784C0 83C4 04 ADD ESP,4
550784C3 8BC7 MOV EAX,EDI
550784C5 5F POP EDI
550784C6 5E POP ESI
550784C7 5B POP EBX
550784C8 5D POP EBP
550784C9 C3 RETN
550784CA CC INT3
550784CB CC INT3
550784CC CC INT3
550784CD CC INT3
550784CE CC INT3
550784CF CC INT3
550784D0 55 PUSH EBP
550784D1 8BEC MOV EBP,ESP
550784D3 53 PUSH EBX
550784D4 8B5D 08 MOV EBX,SS:[EBP+8]
550784D7 85DB TEST EBX,EBX
550784D9 75 08 JNZ SHORT 550784E3
550784DB B8 05020000 MOV EAX,205
550784E0 5B POP EBX
550784E1 5D POP EBP
550784E2 C3 RETN
550784E3 56 PUSH ESI
550784E4 57 PUSH EDI
550784E5 E8 C6BCFFFF CALL dongle_M T.?create_dongle_mngr@@YAPAUIDongle_Mngr@@XZ
550784EA 8BF0 MOV ESI,EAX
550784EC 85F6 TEST ESI,ESI
550784EE 75 07 JNZ SHORT 550784F7
550784F0 BF 06090000 MOV EDI,906
550784F5 EB 5A JMP SHORT 55078551
550784F7 8B45 0C MOV EAX,SS:[EBP+C]
550784FA 83E8 00 SUB EAX,0
550784FD 74 08 JE SHORT 55078507
550784FF 48 DEC EAX
55078500 B8 0E000000 MOV EAX,E
55078505 74 05 JE SHORT 5507850C
55078507 B8 09000000 MOV EAX,9
5507850C 8B16 MOV EDX,DS:[ESI]
5507850E 50 PUSH EAX
5507850F 8B42 08 MOV EAX,DS:[EDX+8]
55078512 6A 00 PUSH 0
55078514 6A 00 PUSH 0
55078516 6A 00 PUSH 0
55078518 6A 00 PUSH 0
5507851A 8BCE MOV ECX,ESI
5507851C FFD0 CALL EAX
5507851E 8BF8 MOV EDI,EAX
55078520 85FF TEST EDI,EDI
55078522 75 2D JNZ SHORT 55078551
55078524 8B16 MOV EDX,DS:[ESI]
55078526 8B52 14 MOV EDX,DS:[EDX+14]
55078529 8D45 08 LEA EAX,SS:[EBP+8]
5507852C 50 PUSH EAX
5507852D 8BCE MOV ECX,ESI
5507852F FFD2 CALL EDX
55078531 85C0 TEST EAX,EAX
55078533 75 07 JNZ SHORT 5507853C
55078535 BF 07090000 MOV EDI,907
5507853A EB 15 JMP SHORT 55078551
5507853C 8B10 MOV EDX,DS:[EAX]
5507853E 8BC8 MOV ECX,EAX
55078540 8B02 MOV EAX,DS:[EDX]
55078542 6A 00 PUSH 0
55078544 FFD0 CALL EAX
55078546 8B10 MOV EDX,DS:[EAX]
55078548 8BC8 MOV ECX,EAX
5507854A 8B42 1C MOV EAX,DS:[EDX+1C]
5507854D FFD0 CALL EAX
5507854F 8903 MOV DS:[EBX],EAX
55078551 8B16 MOV EDX,DS:[ESI]
55078553 8B42 10 MOV EAX,DS:[EDX+10]
55078556 8BCE MOV ECX,ESI
55078558 FFD0 CALL EAX
5507855A 56 PUSH ESI
5507855B E8 D0B7FFFF CALL dongle_M T.?destroy_dongle_mngr@@YAXPAUIDongle_Mngr@@@Z
55078560 83C4 04 ADD ESP,4
55078563 8BC7 MOV EAX,EDI
55078565 5F POP EDI
55078566 5E POP ESI
55078567 5B POP EBX
55078568 5D POP EBP
55078569 C3 RETN
5507856A CC INT3
5507856B CC INT3
5507856C 55 PUSH EBP
5507856D 8BEC MOV EBP,ESP
5507856F 53 PUSH EBX
55078570 56 PUSH ESI
55078571 57 PUSH EDI
55078572 8B45 08 MOV EAX,SS:[EBP+8]
55078575 C740 04 00000000MOV DWORD PTR DS:[EAX+4],0
5507857C 8B45 08 MOV EAX,SS:[EBP+8]
5507857F 8B40 04 MOV EAX,DS:[EAX+4]
55078582 8B4D 08 MOV ECX,SS:[EBP+8]
55078585 8901 MOV DS:[ECX],EAX
55078587 8B45 08 MOV EAX,SS:[EBP+8]
5507858A C740 08 01234567MOV DWORD PTR DS:[EAX+8],67452301
55078591 8B45 08 MOV EAX,SS:[EBP+8]
55078594 C740 0C 89ABCDEFMOV DWORD PTR DS:[EAX+C],EFCDAB89
5507859B 8B45 08 MOV EAX,SS:[EBP+8]
5507859E C740 10 FEDCBA98MOV DWORD PTR DS:[EAX+10],98BADCFE
550785A5 8B45 08 MOV EAX,SS:[EBP+8]
550785A8 C740 14 76543210MOV DWORD PTR DS:[EAX+14],10325476
550785AF EB 00 JMP SHORT 550785B1
550785B1 5F POP EDI
550785B2 5E POP ESI
550785B3 5B POP EBX
550785B4 C9 LEAVE
550785B5 C3 RETN
550785B6 55 PUSH EBP
550785B7 8BEC MOV EBP,ESP
550785B9 83EC 50 SUB ESP,50
550785BC 53 PUSH EBX
550785BD 56 PUSH ESI
550785BE 57 PUSH EDI
550785BF 8B45 08 MOV EAX,SS:[EBP+8]
550785C2 8B00 MOV EAX,DS:[EAX]
550785C4 C1E8 03 SHR EAX,3
550785C7 83E0 3F AND EAX,3F
550785CA 8945 B4 MOV SS:[EBP-4C],EAX
550785CD 8B45 08 MOV EAX,SS:[EBP+8]
550785D0 8B00 MOV EAX,DS:[EAX]
550785D2 8B4D 10 MOV ECX,SS:[EBP+10]
550785D5 8D04C8 LEA EAX,DS:[EAX+ECX*8]
550785D8 8B4D 08 MOV ECX,SS:[EBP+8]
550785DB 3B01 CMP EAX,DS:[ECX]
550785DD 73 06 JNB SHORT 550785E5
550785DF 8B45 08 MOV EAX,SS:[EBP+8]
550785E2 FF40 04 INC DWORD PTR DS:[EAX+4]
550785E5 8B45 10 MOV EAX,SS:[EBP+10]
550785E8 C1E0 03 SHL EAX,3
550785EB 8B4D 08 MOV ECX,SS:[EBP+8]
550785EE 0101 ADD DS:[ECX],EAX
550785F0 8B45 10 MOV EAX,SS:[EBP+10]
550785F3 C1E8 1D SHR EAX,1D
550785F6 8B4D 08 MOV ECX,SS:[EBP+8]
550785F9 0141 04 ADD DS:[ECX+4],EAX
550785FC 837D B4 00 CMP DWORD PTR SS:[EBP-4C],0
55078600 75 29 JNZ SHORT 5507862B
55078602 F645 0C 03 TEST BYTE PTR SS:[EBP+C],3
55078606 75 23 JNZ SHORT 5507862B
55078608 837D 10 40 CMP DWORD PTR SS:[EBP+10],40
5507860C 72 1D JB SHORT 5507862B
5507860E 8B45 0C MOV EAX,SS:[EBP+C]
55078611 50 PUSH EAX
55078612 8B45 08 MOV EAX,SS:[EBP+8]
55078615 83C0 08 ADD EAX,8
55078618 50 PUSH EAX
55078619 E8 37020000 CALL 55078855
5507861E 83C4 08 ADD ESP,8
55078621 836D 10 40 SUB DWORD PTR SS:[EBP+10],40
55078625 8345 0C 40 ADD DWORD PTR SS:[EBP+C],40
55078629 EB DD JMP SHORT 55078608
5507862B 8B45 10 MOV EAX,SS:[EBP+10]
5507862E 8945 B0 MOV SS:[EBP-50],EAX
55078631 FF4D 10 DEC DWORD PTR SS:[EBP+10]
55078634 837D B0 00 CMP DWORD PTR SS:[EBP-50],0
55078638 0F84 B2000000 JE 550786F0
5507863E 8B45 0C MOV EAX,SS:[EBP+C]
55078641 8A00 MOV AL,DS:[EAX]
55078643 8B4D B4 MOV ECX,SS:[EBP-4C]
55078646 8B55 08 MOV EDX,SS:[EBP+8]
55078649 88440A 18 MOV DS:[EDX+ECX+18],AL
5507864D FF45 0C INC DWORD PTR SS:[EBP+C]
55078650 FF45 B4 INC DWORD PTR SS:[EBP-4C]
55078653 837D B4 40 CMP DWORD PTR SS:[EBP-4C],40
55078657 0F85 8E000000 JNZ 550786EB
5507865D C745 BC 00000000MOV DWORD PTR SS:[EBP-44],0
55078664 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
5507866B EB 07 JMP SHORT 55078674
5507866D FF45 BC INC DWORD PTR SS:[EBP-44]
55078670 8345 B8 04 ADD DWORD PTR SS:[EBP-48],4
55078674 837D BC 10 CMP DWORD PTR SS:[EBP-44],10
55078678 73 57 JNB SHORT 550786D1
5507867A 8B45 B8 MOV EAX,SS:[EBP-48]
5507867D 8B4D 08 MOV ECX,SS:[EBP+8]
55078680 8A4401 19 MOV AL,DS:[ECX+EAX+19]
55078684 25 FF000000 AND EAX,FF
55078689 C1E0 08 SHL EAX,8
5507868C 8B4D B8 MOV ECX,SS:[EBP-48]
5507868F 8B55 08 MOV EDX,SS:[EBP+8]
55078692 8A4C0A 1B MOV CL,DS:[EDX+ECX+1B]
55078696 81E1 FF000000 AND ECX,FF
5507869C C1E1 18 SHL ECX,18
5507869F 0BC1 OR EAX,ECX
550786A1 8B4D B8 MOV ECX,SS:[EBP-48]
550786A4 8B55 08 MOV EDX,SS:[EBP+8]
550786A7 8A4C0A 1A MOV CL,DS:[EDX+ECX+1A]
550786AB 81E1 FF000000 AND ECX,FF
550786B1 C1E1 10 SHL ECX,10
550786B4 0BC1 OR EAX,ECX
550786B6 8B4D B8 MOV ECX,SS:[EBP-48]
550786B9 8B55 08 MOV EDX,SS:[EBP+8]
550786BC 8A4C0A 18 MOV CL,DS:[EDX+ECX+18]
550786C0 81E1 FF000000 AND ECX,FF
550786C6 0BC1 OR EAX,ECX
550786C8 8B4D BC MOV ECX,SS:[EBP-44]
550786CB 89448D C0 MOV SS:[EBP+ECX*4-40],EAX
550786CF EB 9C JMP SHORT 5507866D
550786D1 8D45 C0 LEA EAX,SS:[EBP-40]
550786D4 50 PUSH EAX
550786D5 8B45 08 MOV EAX,SS:[EBP+8]
550786D8 83C0 08 ADD EAX,8
550786DB 50 PUSH EAX
550786DC E8 74010000 CALL 55078855
550786E1 83C4 08 ADD ESP,8
550786E4 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
550786EB E9 3BFFFFFF JMP 5507862B
550786F0 EB 00 JMP SHORT 550786F2
550786F2 5F POP EDI
550786F3 5E POP ESI
550786F4 5B POP EBX
550786F5 C9 LEAVE
550786F6 C3 RETN
550786F7 55 PUSH EBP
550786F8 8BEC MOV EBP,ESP
550786FA 83EC 50 SUB ESP,50
550786FD 53 PUSH EBX
550786FE 56 PUSH ESI
550786FF 57 PUSH EDI
55078700 8B45 08 MOV EAX,SS:[EBP+8]
55078703 8B00 MOV EAX,DS:[EAX]
55078705 8945 F8 MOV SS:[EBP-8],EAX
55078708 8B45 08 MOV EAX,SS:[EBP+8]
5507870B 8B40 04 MOV EAX,DS:[EAX+4]
5507870E 8945 FC MOV SS:[EBP-4],EAX
55078711 8B45 08 MOV EAX,SS:[EBP+8]
55078714 8B00 MOV EAX,DS:[EAX]
55078716 C1E8 03 SHR EAX,3
55078719 83E0 3F AND EAX,3F
5507871C 8945 B0 MOV SS:[EBP-50],EAX
5507871F 837D B0 38 CMP DWORD PTR SS:[EBP-50],38
55078723 7C 0D JL SHORT 55078732
55078725 B8 78000000 MOV EAX,78
5507872A 2B45 B0 SUB EAX,SS:[EBP-50]
5507872D 8945 BC MOV SS:[EBP-44],EAX
55078730 EB 0B JMP SHORT 5507873D
55078732 B8 38000000 MOV EAX,38
55078737 2B45 B0 SUB EAX,SS:[EBP-50]
5507873A 8945 BC MOV SS:[EBP-44],EAX
5507873D 8B45 BC MOV EAX,SS:[EBP-44]
55078740 50 PUSH EAX
55078741 68 68501A55 PUSH 551A5068
55078746 8B45 08 MOV EAX,SS:[EBP+8]
55078749 50 PUSH EAX
5507874A E8 67FEFFFF CALL 550785B6
5507874F 83C4 0C ADD ESP,C
55078752 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
55078759 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
55078760 EB 07 JMP SHORT 55078769
55078762 FF45 B8 INC DWORD PTR SS:[EBP-48]
55078765 8345 B4 04 ADD DWORD PTR SS:[EBP-4C],4
55078769 837D B8 0E CMP DWORD PTR SS:[EBP-48],E
5507876D 73 57 JNB SHORT 550787C6
5507876F 8B45 B4 MOV EAX,SS:[EBP-4C]
55078772 8B4D 08 MOV ECX,SS:[EBP+8]
55078775 8A4401 1A MOV AL,DS:[ECX+EAX+1A]
55078779 25 FF000000 AND EAX,FF
5507877E C1E0 10 SHL EAX,10
55078781 8B4D B4 MOV ECX,SS:[EBP-4C]
55078784 8B55 08 MOV EDX,SS:[EBP+8]
55078787 8A4C0A 1B MOV CL,DS:[EDX+ECX+1B]
5507878B 81E1 FF000000 AND ECX,FF
55078791 C1E1 18 SHL ECX,18
55078794 0BC1 OR EAX,ECX
55078796 8B4D B4 MOV ECX,SS:[EBP-4C]
55078799 8B55 08 MOV EDX,SS:[EBP+8]
5507879C 8A4C0A 19 MOV CL,DS:[EDX+ECX+19]
550787A0 81E1 FF000000 AND ECX,FF
550787A6 C1E1 08 SHL ECX,8
550787A9 0BC1 OR EAX,ECX
550787AB 8B4D B4 MOV ECX,SS:[EBP-4C]
550787AE 8B55 08 MOV EDX,SS:[EBP+8]
550787B1 8A4C0A 18 MOV CL,DS:[EDX+ECX+18]
550787B5 81E1 FF000000 AND ECX,FF
550787BB 0BC1 OR EAX,ECX
550787BD 8B4D B8 MOV ECX,SS:[EBP-48]
550787C0 89448D C0 MOV SS:[EBP+ECX*4-40],EAX
550787C4 EB 9C JMP SHORT 55078762
550787C6 8D45 C0 LEA EAX,SS:[EBP-40]
550787C9 50 PUSH EAX
550787CA 8B45 08 MOV EAX,SS:[EBP+8]
550787CD 83C0 08 ADD EAX,8
550787D0 50 PUSH EAX
550787D1 E8 7F000000 CALL 55078855
550787D6 83C4 08 ADD ESP,8
550787D9 C745 B8 00000000MOV DWORD PTR SS:[EBP-48],0
550787E0 C745 B4 00000000MOV DWORD PTR SS:[EBP-4C],0
550787E7 EB 07 JMP SHORT 550787F0
550787E9 FF45 B8 INC DWORD PTR SS:[EBP-48]
550787EC 8345 B4 04 ADD DWORD PTR SS:[EBP-4C],4
550787F0 837D B8 04 CMP DWORD PTR SS:[EBP-48],4
550787F4 73 58 JNB SHORT 5507884E
550787F6 8B45 B8 MOV EAX,SS:[EBP-48]
550787F9 8B4D 08 MOV ECX,SS:[EBP+8]
550787FC 8A4481 08 MOV AL,DS:[ECX+EAX*4+8]
55078800 8B4D B4 MOV ECX,SS:[EBP-4C]
55078803 8B55 08 MOV EDX,SS:[EBP+8]
55078806 88440A 58 MOV DS:[EDX+ECX+58],AL
5507880A 8B45 B8 MOV EAX,SS:[EBP-48]
5507880D 8B4D 08 MOV ECX,SS:[EBP+8]
55078810 8B4481 08 MOV EAX,DS:[ECX+EAX*4+8]
55078814 8B4D B4 MOV ECX,SS:[EBP-4C]
55078817 8B55 08 MOV EDX,SS:[EBP+8]
5507881A 88640A 59 MOV DS:[EDX+ECX+59],AH
5507881E 8B45 B8 MOV EAX,SS:[EBP-48]
55078821 8B4D 08 MOV ECX,SS:[EBP+8]
55078824 8B4481 08 MOV EAX,DS:[ECX+EAX*4+8]
55078828 C1E8 10 SHR EAX,10
5507882B 8B4D B4 MOV ECX,SS:[EBP-4C]
5507882E 8B55 08 MOV EDX,SS:[EBP+8]
55078831 88440A 5A MOV DS:[EDX+ECX+5A],AL
55078835 8B45 B8 MOV EAX,SS:[EBP-48]
55078838 8B4D 08 MOV ECX,SS:[EBP+8]
5507883B 8B4481 08 MOV EAX,DS:[ECX+EAX*4+8]
5507883F C1E8 18 SHR EAX,18
55078842 8B4D B4 MOV ECX,SS:[EBP-4C]
55078845 8B55 08 MOV EDX,SS:[EBP+8]
55078848 88440A 5B MOV DS:[EDX+ECX+5B],AL
5507884C EB 9B JMP SHORT 550787E9
5507884E EB 00 JMP SHORT 55078850
55078850 5F POP EDI
55078851 5E POP ESI
55078852 5B POP EBX
55078853 C9 LEAVE
55078854 C3 RETN
55078855 55 PUSH EBP
55078856 8BEC MOV EBP,ESP
55078858 83EC 10 SUB ESP,10
5507885B 53 PUSH EBX
5507885C 56 PUSH ESI
5507885D 57 PUSH EDI
5507885E 8B45 08 MOV EAX,SS:[EBP+8]
55078861 8B00 MOV EAX,DS:[EAX]
55078863 8945 FC MOV SS:[EBP-4],EAX
55078866 8B45 08 MOV EAX,SS:[EBP+8]
55078869 8B40 04 MOV EAX,DS:[EAX+4]
5507886C 8945 F8 MOV SS:[EBP-8],EAX
5507886F 8B45 08 MOV EAX,SS:[EBP+8]
55078872 8B40 08 MOV EAX,DS:[EAX+8]
55078875 8945 F4 MOV SS:[EBP-C],EAX
55078878 8B45 08 MOV EAX,SS:[EBP+8]
5507887B 8B40 0C MOV EAX,DS:[EAX+C]
5507887E 8945 F0 MOV SS:[EBP-10],EAX
55078881 8B45 F8 MOV EAX,SS:[EBP-8]
55078884 F7D0 NOT EAX
55078886 2345 F0 AND EAX,SS:[EBP-10]
55078889 8B4D F4 MOV ECX,SS:[EBP-C]
5507888C 234D F8 AND ECX,SS:[EBP-8]
5507888F 0BC1 OR EAX,ECX
55078891 8B4D 0C MOV ECX,SS:[EBP+C]
55078894 0301 ADD EAX,DS:[ECX]
55078896 2D 885B9528 SUB EAX,28955B88
5507889B 0145 FC ADD SS:[EBP-4],EAX
5507889E 8B45 FC MOV EAX,SS:[EBP-4]
550788A1 C1E0 07 SHL EAX,7
550788A4 8B4D FC MOV ECX,SS:[EBP-4]
550788A7 C1E9 19 SHR ECX,19
550788AA 0BC1 OR EAX,ECX
550788AC 8945 FC MOV SS:[EBP-4],EAX
550788AF 8B45 F8 MOV EAX,SS:[EBP-8]
550788B2 0145 FC ADD SS:[EBP-4],EAX
550788B5 8B45 FC MOV EAX,SS:[EBP-4]
550788B8 F7D0 NOT EAX
550788BA 2345 F4 AND EAX,SS:[EBP-C]
550788BD 8B4D F8 MOV ECX,SS:[EBP-8]
550788C0 234D FC AND ECX,SS:[EBP-4]
550788C3 0BC1 OR EAX,ECX
550788C5 8B4D 0C MOV ECX,SS:[EBP+C]
550788C8 0341 04 ADD EAX,DS:[ECX+4]
550788CB 2D AA483817 SUB EAX,173848AA
550788D0 0145 F0 ADD SS:[EBP-10],EAX
550788D3 8B45 F0 MOV EAX,SS:[EBP-10]
550788D6 C1E0 0C SHL EAX,C
550788D9 8B4D F0 MOV ECX,SS:[EBP-10]
550788DC C1E9 14 SHR ECX,14
550788DF 0BC1 OR EAX,ECX
550788E1 8945 F0 MOV SS:[EBP-10],EAX
550788E4 8B45 FC MOV EAX,SS:[EBP-4]
550788E7 0145 F0 ADD SS:[EBP-10],EAX
550788EA 8B45 F0 MOV EAX,SS:[EBP-10]
550788ED F7D0 NOT EAX
550788EF 2345 F8 AND EAX,SS:[EBP-8]
550788F2 8B4D FC MOV ECX,SS:[EBP-4]
550788F5 234D F0 AND ECX,SS:[EBP-10]
550788F8 0BC1 OR EAX,ECX
550788FA 8B4D 0C MOV ECX,SS:[EBP+C]
550788FD 0341 08 ADD EAX,DS:[ECX+8]
55078900 05 DB702024 ADD EAX,242070DB
55078905 0145 F4 ADD SS:[EBP-C],EAX
55078908 8B45 F4 MOV EAX,SS:[EBP-C]
5507890B C1E0 11 SHL EAX,11
5507890E 8B4D F4 MOV ECX,SS:[EBP-C]
55078911 C1E9 0F SHR ECX,F
55078914 0BC1 OR EAX,ECX
55078916 8945 F4 MOV SS:[EBP-C],EAX
55078919 8B45 F0 MOV EAX,SS:[EBP-10]
5507891C 0145 F4 ADD SS:[EBP-C],EAX
5507891F 8B45 F4 MOV EAX,SS:[EBP-C]
55078922 F7D0 NOT EAX
55078924 2345 FC AND EAX,SS:[EBP-4]
55078927 8B4D F4 MOV ECX,SS:[EBP-C]
5507892A 234D F0 AND ECX,SS:[EBP-10]
5507892D 0BC1 OR EAX,ECX
5507892F 8B4D 0C MOV ECX,SS:[EBP+C]
55078932 0341 0C ADD EAX,DS:[ECX+C]
55078935 2D 1231423E SUB EAX,3E423112
5507893A 0145 F8 ADD SS:[EBP-8],EAX
5507893D 8B45 F8 MOV EAX,SS:[EBP-8]
55078940 C1E8 0A SHR EAX,A
55078943 8B4D F8 MOV ECX,SS:[EBP-8]
55078946 C1E1 16 SHL ECX,16
55078949 0BC1 OR EAX,ECX
5507894B 8945 F8 MOV SS:[EBP-8],EAX
5507894E 8B45 F4 MOV EAX,SS:[EBP-C]
55078951 0145 F8 ADD SS:[EBP-8],EAX
55078954 8B45 F8 MOV EAX,SS:[EBP-8]
55078957 F7D0 NOT EAX
55078959 2345 F0 AND EAX,SS:[EBP-10]
5507895C 8B4D F4 MOV ECX,SS:[EBP-C]
5507895F 234D F8 AND ECX,SS:[EBP-8]
55078962 0BC1 OR EAX,ECX
55078964 8B4D 0C MOV ECX,SS:[EBP+C]
55078967 0341 10 ADD EAX,DS:[ECX+10]
5507896A 2D 51F0830A SUB EAX,A83F051
5507896F 0145 FC ADD SS:[EBP-4],EAX
55078972 8B45 FC MOV EAX,SS:[EBP-4]
55078975 C1E0 07 SHL EAX,7
55078978 8B4D FC MOV ECX,SS:[EBP-4]
5507897B C1E9 19 SHR ECX,19
5507897E 0BC1 OR EAX,ECX
55078980 8945 FC MOV SS:[EBP-4],EAX
55078983 8B45 F8 MOV EAX,SS:[EBP-8]
55078986 0145 FC ADD SS:[EBP-4],EAX
55078989 8B45 FC MOV EAX,SS:[EBP-4]
5507898C F7D0 NOT EAX
5507898E 2345 F4 AND EAX,SS:[EBP-C]
55078991 8B4D F8 MOV ECX,SS:[EBP-8]
55078994 234D FC AND ECX,SS:[EBP-4]
55078997 0BC1 OR EAX,ECX
55078999 8B4D 0C MOV ECX,SS:[EBP+C]
5507899C 0341 14 ADD EAX,DS:[ECX+14]
5507899F 05 2AC68747 ADD EAX,4787C62A
550789A4 0145 F0 ADD SS:[EBP-10],EAX
550789A7 8B45 F0 MOV EAX,SS:[EBP-10]
550789AA C1E0 0C SHL EAX,C
550789AD 8B4D F0 MOV ECX,SS:[EBP-10]
550789B0 C1E9 14 SHR ECX,14
550789B3 0BC1 OR EAX,ECX
550789B5 8945 F0 MOV SS:[EBP-10],EAX
550789B8 8B45 FC MOV EAX,SS:[EBP-4]
550789BB 0145 F0 ADD SS:[EBP-10],EAX
550789BE 8B45 F0 MOV EAX,SS:[EBP-10]
550789C1 F7D0 NOT EAX
550789C3 2345 F8 AND EAX,SS:[EBP-8]
550789C6 8B4D FC MOV ECX,SS:[EBP-4]
550789C9 234D F0 AND ECX,SS:[EBP-10]
550789CC 0BC1 OR EAX,ECX
550789CE 8B4D 0C MOV ECX,SS:[EBP+C]
550789D1 0341 18 ADD EAX,DS:[ECX+18]
550789D4 2D EDB9CF57 SUB EAX,57CFB9ED
550789D9 0145 F4 ADD SS:[EBP-C],EAX
550789DC 8B45 F4 MOV EAX,SS:[EBP-C]
550789DF C1E0 11 SHL EAX,11
550789E2 8B4D F4 MOV ECX,SS:[EBP-C]
550789E5 C1E9 0F SHR ECX,F
550789E8 0BC1 OR EAX,ECX
550789EA 8945 F4 MOV SS:[EBP-C],EAX
550789ED 8B45 F0 MOV EAX,SS:[EBP-10]
550789F0 0145 F4 ADD SS:[EBP-C],EAX
550789F3 8B45 F4 MOV EAX,SS:[EBP-C]
550789F6 F7D0 NOT EAX
550789F8 2345 FC AND EAX,SS:[EBP-4]
550789FB 8B4D F4 MOV ECX,SS:[EBP-C]
550789FE 234D F0 AND ECX,SS:[EBP-10]
55078A01 0BC1 OR EAX,ECX
55078A03 8B4D 0C MOV ECX,SS:[EBP+C]
55078A06 0341 1C ADD EAX,DS:[ECX+1C]
55078A09 2D FF6AB902 SUB EAX,2B96AFF
55078A0E 0145 F8 ADD SS:[EBP-8],EAX
55078A11 8B45 F8 MOV EAX,SS:[EBP-8]
55078A14 C1E8 0A SHR EAX,A
55078A17 8B4D F8 MOV ECX,SS:[EBP-8]
55078A1A C1E1 16 SHL ECX,16
55078A1D 0BC1 OR EAX,ECX
55078A1F 8945 F8 MOV SS:[EBP-8],EAX
55078A22 8B45 F4 MOV EAX,SS:[EBP-C]
55078A25 0145 F8 ADD SS:[EBP-8],EAX
55078A28 8B45 F8 MOV EAX,SS:[EBP-8]
55078A2B F7D0 NOT EAX
55078A2D 2345 F0 AND EAX,SS:[EBP-10]
55078A30 8B4D F4 MOV ECX,SS:[EBP-C]
55078A33 234D F8 AND ECX,SS:[EBP-8]
55078A36 0BC1 OR EAX,ECX
55078A38 8B4D 0C MOV ECX,SS:[EBP+C]
55078A3B 0341 20 ADD EAX,DS:[ECX+20]
55078A3E 05 D8988069 ADD EAX,698098D8
55078A43 0145 FC ADD SS:[EBP-4],EAX
55078A46 8B45 FC MOV EAX,SS:[EBP-4]
55078A49 C1E0 07 SHL EAX,7
55078A4C 8B4D FC MOV ECX,SS:[EBP-4]
55078A4F C1E9 19 SHR ECX,19
55078A52 0BC1 OR EAX,ECX
55078A54 8945 FC MOV SS:[EBP-4],EAX
55078A57 8B45 F8 MOV EAX,SS:[EBP-8]
55078A5A 0145 FC ADD SS:[EBP-4],EAX
55078A5D 8B45 FC MOV EAX,SS:[EBP-4]
55078A60 F7D0 NOT EAX
55078A62 2345 F4 AND EAX,SS:[EBP-C]
55078A65 8B4D F8 MOV ECX,SS:[EBP-8]
55078A68 234D FC AND ECX,SS:[EBP-4]
55078A6B 0BC1 OR EAX,ECX
55078A6D 8B4D 0C MOV ECX,SS:[EBP+C]
55078A70 0341 24 ADD EAX,DS:[ECX+24]
55078A73 2D 5108BB74 SUB EAX,74BB0851
55078A78 0145 F0 ADD SS:[EBP-10],EAX
55078A7B 8B45 F0 MOV EAX,SS:[EBP-10]
55078A7E C1E0 0C SHL EAX,C
55078A81 8B4D F0 MOV ECX,SS:[EBP-10]
55078A84 C1E9 14 SHR ECX,14
55078A87 0BC1 OR EAX,ECX
55078A89 8945 F0 MOV SS:[EBP-10],EAX
55078A8C 8B45 FC MOV EAX,SS:[EBP-4]
55078A8F 0145 F0 ADD SS:[EBP-10],EAX
55078A92 8B45 F0 MOV EAX,SS:[EBP-10]
55078A95 F7D0 NOT EAX
55078A97 2345 F8 AND EAX,SS:[EBP-8]
55078A9A 8B4D FC MOV ECX,SS:[EBP-4]
55078A9D 234D F0 AND ECX,SS:[EBP-10]
55078AA0 0BC1 OR EAX,ECX
55078AA2 8B4D 0C MOV ECX,SS:[EBP+C]
55078AA5 0341 28 ADD EAX,DS:[ECX+28]
55078AA8 2D 4FA40000 SUB EAX,A44F
55078AAD 0145 F4 ADD SS:[EBP-C],EAX
55078AB0 8B45 F4 MOV EAX,SS:[EBP-C]
55078AB3 C1E0 11 SHL EAX,11
55078AB6 8B4D F4 MOV ECX,SS:[EBP-C]
55078AB9 C1E9 0F SHR ECX,F
55078ABC 0BC1 OR EAX,ECX
55078ABE 8945 F4 MOV SS:[EBP-C],EAX
55078AC1 8B45 F0 MOV EAX,SS:[EBP-10]
55078AC4 0145 F4 ADD SS:[EBP-C],EAX
55078AC7 8B45 F4 MOV EAX,SS:[EBP-C]
55078ACA F7D0 NOT EAX
55078ACC 2345 FC AND EAX,SS:[EBP-4]
55078ACF 8B4D F4 MOV ECX,SS:[EBP-C]
55078AD2 234D F0 AND ECX,SS:[EBP-10]
55078AD5 0BC1 OR EAX,ECX
55078AD7 8B4D 0C MOV ECX,SS:[EBP+C]
55078ADA 0341 2C ADD EAX,DS:[ECX+2C]
55078ADD 2D 4228A376 SUB EAX,76A32842
55078AE2 0145 F8 ADD SS:[EBP-8],EAX
55078AE5 8B45 F8 MOV EAX,SS:[EBP-8]
55078AE8 C1E8 0A SHR EAX,A
55078AEB 8B4D F8 MOV ECX,SS:[EBP-8]
55078AEE C1E1 16 SHL ECX,16
55078AF1 0BC1 OR EAX,ECX
55078AF3 8945 F8 MOV SS:[EBP-8],EAX
55078AF6 8B45 F4 MOV EAX,SS:[EBP-C]
55078AF9 0145 F8 ADD SS:[EBP-8],EAX
55078AFC 8B45 F8 MOV EAX,SS:[EBP-8]
55078AFF F7D0 NOT EAX
55078B01 2345 F0 AND EAX,SS:[EBP-10]
55078B04 8B4D F4 MOV ECX,SS:[EBP-C]
55078B07 234D F8 AND ECX,SS:[EBP-8]
55078B0A 0BC1 OR EAX,ECX
55078B0C 8B4D 0C MOV ECX,SS:[EBP+C]
55078B0F 0341 30 ADD EAX,DS:[ECX+30]
55078B12 05 2211906B ADD EAX,6B901122
55078B17 0145 FC ADD SS:[EBP-4],EAX
55078B1A 8B45 FC MOV EAX,SS:[EBP-4]
55078B1D C1E0 07 SHL EAX,7
55078B20 8B4D FC MOV ECX,SS:[EBP-4]
55078B23 C1E9 19 SHR ECX,19
55078B26 0BC1 OR EAX,ECX
55078B28 8945 FC MOV SS:[EBP-4],EAX
55078B2B 8B45 F8 MOV EAX,SS:[EBP-8]
55078B2E 0145 FC ADD SS:[EBP-4],EAX
55078B31 8B45 FC MOV EAX,SS:[EBP-4]
55078B34 F7D0 NOT EAX
55078B36 2345 F4 AND EAX,SS:[EBP-C]
55078B39 8B4D F8 MOV ECX,SS:[EBP-8]
55078B3C 234D FC AND ECX,SS:[EBP-4]
55078B3F 0BC1 OR EAX,ECX
55078B41 8B4D 0C MOV ECX,SS:[EBP+C]
55078B44 0341 34 ADD EAX,DS:[ECX+34]
55078B47 2D 6D8E6702 SUB EAX,2678E6D
[培训]《安卓高级研修班(网课)》月薪三万计划,掌握调试、分析还原ollvm、vmp的方法,定制art虚拟机自动化脱壳的方法
赞赏
看原图
赞赏
雪币:
留言: