本文介绍了IDA Pro的汇编指令的变化的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!
问题描述
我只是想知道我怎么能
在IDA视图改变汇编指令:
- 如何编辑指令(
例如:JNZ到JMP) - 如何插入新指令(调用func1的,
打电话FUNC2插入现有的
code)?
我知道如何使DIF文件,我知道如何应用在我的DLL的变化,却怎么也
我赚取差价?我怎样才能在IDA编辑code?
我学会了如何修改DLL:
- 修改code(如何?)
- 生成DIF文件。
- 应用code修改与DIF文件和脚本DLL。
解决方案
- 有是用于默认显示一个
编辑/补丁
菜单却是隐藏在最近IDA发布。如果您遇到这种情况,编辑CFG / idagui.cfg文件,查找DISPLAY_PATCH_SUBMENU = NO
行并更改设置。在接下来的IDA会议,你将能够改变单字节/字值或在OllyDbg的汇聚点code等。 - 一旦您修补数据库,转到
文件/制作文件/新建DIF文件
,它会让你在表单偏移/值之前创建一个简单的补丁文件/后的值(它不是普通的diff文件格式) - 要的DIF文件应用到现有的文件,您可以使用,在
HTH:O)
I just want to know how I canchange asm instructions in the IDA-view A:
- How to edit instructions(forinstance: jnz to jmp)?
- How to insert new instructions(call func1,call func2 inserted to existingcode)?
I know how to make dif files, I know how to apply the changes on my DLL, but how canI "make the difference"? How can I edit the code in IDA?
I learned how to modify a DLL:
- Modify code(how?)
- Generate dif file.
- Apply the code modifications to the DLL with the dif file and a script.
解决方案
- There is a
Edit / Patch
menu that used to be shown by default but that is hidden in recent IDA releases. If it is your case, edit the cfg/idagui.cfg file, look for theDISPLAY_PATCH_SUBMENU = NO
line and change the setting. On the next IDA session, you will be able to change single byte / word values or assemble some code like in OllyDbg. - Once you have patched your database, go to
File / Produce file / Create DIF file
, it will let you create a simple diff file in the form offset / value before / value after (it is not the common diff file format) - To apply the dif file to an existing file, you can use the source code of a dif file patcher that was released in the IDA Pro Book
HTH :o)
这篇关于IDA Pro的汇编指令的变化的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!