1

Well, I have the old version of an assembly with a mapped address to a function I need to detour.

The developer has stopped the reverse engineering to that assembly, so now, I want to do his job. But Idk where to start. I'm very newbie on this bussiness.

I have downloaded IDA, and I have subroutine calls on the assembly language. but I don't know how to continue.

I already have checked for the hexadecimal but this trick didn't worked on the new version.

So, what tricks do you suggest?

1

BinnDiff and Diaphora do eactly what you ask.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.