Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Editing assembly on Mac OS X

I'm currently disassembling a Mach-O executable(the executable runs on Mac OS X, to be specific) in IDA Pro on windows. I have one instruction which I want to change, but it doesn't seem that IDA Pro allows you to do this. So, I tried using otool on OS X to dump the assembly(which it does fine). However, after editing the assembly in otool, I tried to reassemble it using as <file name of modified otool -tV output>. This greets me with a bunch of errors like Junk character 43 (+). What's the easiest way to change just a single instruction in a Mach-O binary on Mac OS X?

like image 256
Mike Avatar asked Dec 19 '09 06:12

Mike


2 Answers

I've used both otool and otx to disassemble various binaries, and I've found the easiest way to edit them is to figure out what the assembly of the new code I want is (using nasm or similar), then just use a hex editor (I prefer Hex Fiend) on the binary file.

like image 56
Tim Avatar answered Nov 08 '22 19:11

Tim


I use Synalize It!.

You can load also a custom grammar (example for png files, showing header, tags, etc...)

like image 31
elp Avatar answered Nov 08 '22 18:11

elp