The Ghidra Book

22PATCHING BINARIES

Occasionally when reverse engineering a binary, you may decide that you want to modify the behavior of the original binary. Behavioral modification is usually accomplished by patching the binary to insert, remove, or modify existing instructions. Many motivations exist for making such modifications—some more controversial than others—including the following:

• Modifying a malware sample to eliminate anti-debug techniques that prevent the malware from being studied

• Patching vulnerabilities in software for which you have no source code

• Customizing an application’s splash screen or string content

• Modifying game logic for the purposes ...