本文介绍了IDA Pro的汇编指令的变化的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

我只是想知道我怎么能
在IDA视图改变汇编指令:


  1. 如何编辑指令(
    例如:JNZ到J​​MP)

  2. 如何插入新指令(调用func1的,
    打电话FUNC2插入现有的
    code)?

我知道如何使DIF文件,我知道如何应用在我的DLL的变化,却怎么也
我赚取差价?我怎样才能在IDA编辑code?

我学会了如何修改DLL:


  1. 修改code(如何?)

  2. 生成DIF文件。

  3. 应用code修改与DIF文件和脚本DLL。


解决方案

  1. 有是用于默认显示一个编辑/补丁菜单却是隐藏在最近IDA发布。如果您遇到这种情况,编辑CFG / idagui.cfg文件,查找 DISPLAY_PATCH_SUBMENU = NO 行并更改设置。在接下来的IDA会议,你将能够改变单字节/字值或在OllyDbg的汇聚点code等。

  2. 一旦您修补数据库,转到文件/制作文件/新建DIF文件,它会让你在表单偏移/值之前创建一个简单的补丁文件/后的值(它不是普通的diff文件格式)

  3. 要的DIF文件应用到现有的文件,您可以使用,在

HTH:O)

I just want to know how I canchange asm instructions in the IDA-view A:

  1. How to edit instructions(forinstance: jnz to jmp)?
  2. How to insert new instructions(call func1,call func2 inserted to existingcode)?

I know how to make dif files, I know how to apply the changes on my DLL, but how canI "make the difference"? How can I edit the code in IDA?

I learned how to modify a DLL:

  1. Modify code(how?)
  2. Generate dif file.
  3. Apply the code modifications to the DLL with the dif file and a script.
解决方案
  1. There is a Edit / Patch menu that used to be shown by default but that is hidden in recent IDA releases. If it is your case, edit the cfg/idagui.cfg file, look for the DISPLAY_PATCH_SUBMENU = NO line and change the setting. On the next IDA session, you will be able to change single byte / word values or assemble some code like in OllyDbg.
  2. Once you have patched your database, go to File / Produce file / Create DIF file, it will let you create a simple diff file in the form offset / value before / value after (it is not the common diff file format)
  3. To apply the dif file to an existing file, you can use the source code of a dif file patcher that was released in the IDA Pro Book

HTH :o)

这篇关于IDA Pro的汇编指令的变化的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!

10-22 08:58