0

Is there a way to modify one or more bytes in memory without making any changes in the database? I know about idc.PatchByte() in idapython, but it will print the message that states that 'This database has been patched' on the next run.

  • 1
    You may also try Edit -> Patch program -> Change byte/word in IDA Pro. PS: Consider to save the state of your IDA Database before changing bytes with Database snapshot manager(Ctrl+Shift+T). It will help you to avoid troubles if something will go wrong. If you want to patch the binary that you dissect, there are a plenty of ways to do that. You may use Edit -> Patch program -> Apply patches to input file in IDA Pro. Alternatively you may modify a binary in a debugger or with some hex editor. What would you like to modify? – 0xDEADC0DE Sep 17 '15 at 15:04
  • This is not suitable for me for exactly the same reason why idc.PatchByte() is not suitable for me. I estimated that the first answer will be like that - sorry that I hadn't mentioned this in op post. – vdudouyt Sep 17 '15 at 15:51
  • Probably PatchDbgByte(ea,value) from IDA Pro command line or in script will help. As descibed in idc.py this function meant to "Change a byte in the debugged process memory only". – орион орионВи Jan 16 '19 at 20:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.