📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  recompile to .exe

Topic created on: February 19, 2010 11:46 CST by Dannymet .

Hi, I opened a .net assembly, and modified just one line in the code
i cant recompile the .exe again though. Ive tried creating it as an asm file (compiling the asm didnt work) and a dif file (dif to patch the original) but none seem to work.
ive also tried pe_sections.idc then pe_write.idc, but i get the error "The HEADER section is not in the first section"

  kowboykoder   February 22, 2010 20:29.43 CST
I dont think IDA is capable of recompiling to an EXE (despite the option being there), at least in the free version anyway. Maybe in the commercial version.

IDA is advertised as a disassembler / decompiler / debugger, not a compiler as well.

  Silkut     February 23, 2010 02:47.34 CST
IDA can not directly patch the EXE, however in latest commercial versions you could produce a .dif file to patch your application. Try to look that way.

  velocirapt0r     November 25, 2011 08:46.53 CST
Not a gravedig. xkcd[979].

Use latest version as previously suggested, make a .dif, and patch with this (run at commandline with at least one argument for usage message):
http://pastebin.com/WsbKhdwB

Protip: compilers are your friend.

  Swoorup     November 26, 2011 11:52.08 CST
View the structure of diff file.
Then open the diff file.
And then use a hex editor to patch the exe.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit