0

Is there ant way to see all of my changes in idb file ?

All of variable in psudo code that I changed here name, all the funxtion I rename.

I want to see all of this

1
  • AFAIK, IDA only shows the bytes are patched relative to the actual loaded binary.
    – Biswapriyo
    Commented Oct 20, 2018 at 13:34

1 Answer 1

1

As far as I know there is no easy way to do that, but with some IDAPython or IDC scripting it is achievable.

  • Regarding renamed and re-typed global items (functions, global variables, label names, almost everything not related to the decompiled functions content): you can just export all this data as idc script (File-->Produce file-->Dump database to IDC file) and filter it.
  • If you need only renamed items, you can see all the data in the Names window (View-->Open subview-->Names window or Shift-F4). You can also iterate these names with IdaPython function idautils.Names() and use idc.GetType or one of its alternatives to get the corresponding data type.
  • Regarding types you created: you can use File-->Produce file-->Create C header file

  • Regarding decompiler related changes: you can extend one of the decompiler IDApython samples to show what you need: this sample dumps all user changes in the function at your cursor location, changing it to run over all functions should be trivial.

These actions should cover the most of what you probably need.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.