修改程序函数

 ea指地址

 

DleteAll

删除所有段，指令和注释

 

MakeCoce(ea)

　　在特定地址创建指令，成功返回指令长度，失败返回0

 

区域指令分析

AnalyzeArea(sEA, eEA):

"""Perform full analysis of the area

@param sEA: starting linear address
@param eEA: ending linear address (excluded)

@return: 1-ok, 0-Ctrl-Break was pressed.

 

MakeComm(ea,common)

增加注释

 

将未定义数据转换为特写类型

MakeArray

MakeStr

MakeData

MakeWord

 

 

OpBinary(ea,n)

Convert an operand of the item (instruction or data) to a binary number

@param ea: linear address
@param n: number of operand
- 0 - the first operand
- 1 - the second, third and all other operands
- -1 - all operands

@return: 1-ok, 0-failure

@note: the data items use only the type of the first operand

 

修改指定位置的指令，以字符串形式,ida不会检测指令，只是简单的替换

SetManualInsn(ea, insn)

获取手动修改的指令

GetManualInsn(ea)

 

修改调试内存数据,只对调试状态有效,成功返回1,失败0

PatchDbgByte(ea,value)

 

修改字节,修改地址数值为0x10

PatchByte(ea,0x10)

PatchByte

PatchWord

PatchDword

PatchQword

 

修改寄存器值

SetRegEx(ea, reg, value, tag)