1

Is there a tool that disassembles x86 executables, presents it in a GUI where you can edit the assembly commands, and reassembles it when you want to save/patch the exe?

All it would need is a tool that disassembles and reassembles x86 executables into a kind of text format .. like what ildump does with .NET.

| improve this question | |
3

Use IDA Pro with pe_write.idc.

There's a full walk-through here: http://resources.infosecinstitute.com/applied-cracking-byte-patching-ida-pro/

| improve this answer | |
2

Use IDA Pro. This is exactly the tool you're asking for. For patching the binary, use the options under the menu Edit -> Patch.

| improve this answer | |
  • How do you edit an opcode with IDA? I can't find any way of doing that. – Robin Rodricks Mar 27 '14 at 4:55
  • Either in the hex viewer or via Edit -> Patch program -> Change byte/word or Assemble. My guess is that you're using "an old version" of IDA. In this case, you need to modify $IDA_DIR/cfg/idagui.cfg uncomenting the line that refers to the patch menu. – joxeankoret Mar 27 '14 at 8:26
1

Althought the 'GUI' is console based, I always used HIEW.

| improve this answer | |
1

Ollydbg is a free tool - it's more of a debugger than a disassembler.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.