(The software is Chinese and contains malware. I do not know if I could upload it here, so temporarily, please let me describe it)
I am asked by a spa store to "do something" to make a software that looks like from 2003 for them to use, the name is "Ehang skin analysis system". The spa store gave me an usb key (a dongle usb), which they borrowed from another store, and they have to return it when they have a copy.
I could not find any information about the software on google. Plus, the usb key does not appear anywhere on the computer, from emulators to rufus, not even on Linux, so that I do not figure out how to clone it, or find out if it is
HASP. So the only way is to reverse it. I am using x64dbg.
The software uses VMProtect, I passed it by using Scyllahide.
But I am stuck at this step, below is when I did not insert the USB key
I have tried dozen times, but before and after inserting the USB key, everything just "turned into" other codes, not that they jump from code A to code B,
popfd just turned into
ret without any step. I have tried with
step into and
step over and
animate. The pointer stand still at the same line but only the code is changed. So I do not know where to jump into the code that makes the software work.
So, how to make it turn into the working code without the USB key?