I just want to know how I can change asm instructions in the IDA-view A:
I know how to make dif files, I know how to apply the changes on my DLL, but how can I "make the difference"? How can I edit the code in IDA?
I learned how to modify a DLL:
In order to change only the function end address, you can use FunctionEnd command. If the current address does not belong to any function, IDA beeps. This command allows you to change the function frame parameters too. You can change sizes of some parts of frame structure.
IDA Pro is a very good disassembler that should be used in every reverse engineering scenario. We've seen the basic windows that IDA Pro uses and introduced them on the reverse Meterpreter executable.
IDA Pro is primarily a multi-platform, multi-processor dis-assembler that translates machine executable code into assembly language source code for purpose of debugging and reverse engineering. It can be used as a local or as a remote debugger on various platforms.
Edit / Patch
menu that used to be shown by default but that is hidden in recent IDA releases. If it is your case, edit the cfg/idagui.cfg
file, look for the DISPLAY_PATCH_SUBMENU = NO
line and change the setting. On the next IDA session, you will be able to change single byte / word values or assemble some code like in OllyDbg.File / Produce file / Create DIF file
, it will let you create a simple diff file in the form offset / value before / value after (it is not the common diff file format)Use Edit->patch program->assemble
to write in assembly syntax
Use Edit->patch program -> patch bytes
to edit bytes in the binary
Finally, use Edit->patch program -> apply patch to input file
to apply patches. I'v personally used it in IDA 7.0
Try IDA Pro 6.1 or 6.2. It has the ability to write the changes to the input file directly.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With