Hi I am sort of new to ida pro even though I've used a lot but when I push a function where a 0 used to be it gives me sp-analysis failure
I've searched for a fix for a while to no avail help would be much appreciated.
Turn on bytes. You'll see you don't have enough space. You're going to have to figure out where to steal some. Wherever that is, via jump short, you need a couple more bytes.
The problem is that you are changing 2
bytes instruction push 0
into push offset
which is 5 bytes instruction. So you overwrite subsequent instruction’s prefix and that’s why sp analysis fails (push offset Studio_done
changed to db 0
and pop
, so you have pop
instead of push
).