Maximum number of attacks per step (jl changed to jmp)
. Text: 0048BEE6 cmp eax, 1F0h
. Text: 0048 BEEB jl short loc_48BF01
. Text: 0048 BEED push offset aThankYouForUsi
The "About" dialog box is displayed at startup (all nop)
. Text: 00410104 push ecx
. Text: 00410105 call sub_53CA40
. Text: 00000010a add esp, 4
After a period of time, you are welcome to use IDA demo (changed to retn in section 00412550)
. Text: 00412550 mov ecx, dword_690198
. Text: 00412556 jmp ds :? Exec @ QDialog @ QT @ QAEHXZ; QT: QDialog: exec (void)
When the function is disabled, IDA demo (convert mov ecx, dword_690198, and call ds :? Exec @ QDialog @ QT @ QAEHXZ statement nop out)
. Text: 00414DF3 mov ecx, dword_690198
. Text: 00414DF9 push edi
. Text: 00414DFA call ds :? Exec @ QDialog @ QT @ QAEHXZ; QT: QDialog: exec (void)
A disassembly has been opened, and a new disassembly is opened. You are welcome to use IDA demo (same as above)
. Text: 004143B0 mov ecx, dword_690198
. Text: 004143B6 call ds :? Exec @ QDialog @ QT @ QAEHXZ; QT: QDialog: exec (void)
. Text: 004143BC mov eax, ds: database_flags
. Text: 004143C1 or dword ptr [eax], 1
. Text: 004143C4 mov al, 1
. Text: 004143C6 retn
Close current disassembly display. Welcome to IDA demo (same as above)
. Text: 004143D0 sub_4143D0 proc near; data xref: sub_595800 + 43Bo
. Text: 004143D0 mov ecx, dword_690198
. Text: 004143D6 call ds :? Exec @ QDialog @ QT @ QAEHXZ; QT: QDialog: exec (void)
. Text: 004143DC mov eax, ds: database_flags
. Text: 004143E1 or dword ptr [eax], 1
Limit on the number of lines of the copied code (delete the jge Statement by nop)
. Text: 0042CAA5 cmp ebx, 100 h
. Text: 0042 CAAB jge loc_42CBCA
Modification record:
20130406. In order to prevent the EXE image from being loaded to other non-default endpoints in WIN7 and other environments, add the IMAGE_FILE_RELOCS_STRIPPED bit to Nt_headers-> FileHeader. Characteristics.