Hi!

I know IDA isn't the best friend for altering code. But I don't want to use other programs so that my work keeps consistent.

I patch the code while debugging and everything works fine. The patch remains in the code but every time I start a new debugging session, IDA warns me that the debugged process and my idb differ and IDA uses the original code.
If I patched the code with some other tool and I would loose all information I entered so far in my idb, when I have to load the code again into IDA.


Any help?

Thx a lot,

HMeis

when you use the patch feature during a debug session it simply patches
the processes memory only and also only the database disassembly, no
information is written back to disk, so when you relaunch the process the
orignal bytes are once again in memory.

You really need to also patch the executable with a hex editor, at worse
perhapes the IDA write exe might work. If you do patch with a hex editor
you can choose from the ida file menu to simply reload the input file, i think
this "shouldnt" destroy your database and notes.

DataRescue aims the product at the analysis market and this is the simple
reason why features such as code modification are actively developed upon.

/yates.

thanks for such quick and helpful response!