修改程序函数

 ea指地址

DleteAll

删除所有段,指令和注释

MakeCoce(ea)

  在特定地址创建指令,成功返回指令长度,失败返回0

区域指令分析

AnalyzeArea(sEA, eEA):

"""Perform full analysis of the area

@param sEA: starting linear address
@param eEA: ending linear address (excluded)

@return: 1-ok, 0-Ctrl-Break was pressed.

MakeComm(ea,common)

增加注释

将未定义数据转换为特写类型

MakeArray

MakeStr

MakeData

MakeWord

OpBinary(ea,n)

Convert an operand of the item (instruction or data) to a binary number

@param ea: linear address
@param n: number of operand
- 0 - the first operand
- 1 - the second, third and all other operands
- -1 - all operands

@return: 1-ok, 0-failure

@note: the data items use only the type of the first operand

修改指定位置的指令,以字符串形式,ida不会检测指令,只是简单的替换

SetManualInsn(ea, insn)

获取手动修改的指令

GetManualInsn(ea)

修改调试内存数据,只对调试状态有效,成功返回1,失败0

PatchDbgByte(ea,value)

修改字节,修改地址数值为0x10

PatchByte(ea,0x10)

PatchByte

PatchWord

PatchDword

PatchQword

修改寄存器值

SetRegEx(ea, reg, value, tag)

原文地址:https://www.cnblogs.com/fply/p/8503385.html