PDA

View Full Version : Tools for 64bit Assembly/Debugging/Patching ??


nick_name
November 3rd, 2010, 04:37
Is anyone aware of proper tools that lets edit/patch 64bit binaries using assembly instruction.

For example, for 32 bit binaries we could press "space-bar" in Olly and type "mov ebx, eax". Since, Olly will not handle 64bit binaries, what are the other sane options to debug and patch the 64bit cousins ?

My problem is:
- I know the location to patch.
- I know the x68 ASM code to patch with.
- I *DONT* know the corresponding 64bit translation of the ASM.

Options I have tried:
- Visual DuxCore Debugger (doesn't seem to let edit/patch)
- Manually editing byte in 64 bit IDA disassembly and checking the 64 bit translation. (with limited success)

Aimless
November 3rd, 2010, 06:58
Microsoft Windows Debugger.

Surprisingly Good.

Have Phun

chessgod101
November 8th, 2010, 11:18
The best option I have found for patching x64 is Hiew 8.x. It allows you to modify the assembly command directly, as well as it's hexadecimal representation.

LaBBa
November 17th, 2010, 13:49
IDA can debug native 64 applications i done it and its realy cool
for editing the asm well you can use any Hex editor but if you are looking for
somthing that will translate the ASM command to byte code Hiew is the tool for you.

dELTA
November 27th, 2010, 13:36
Won't the "hidden" IDA patch tools do it too?

mr_tex
September 18th, 2012, 00:20
I have a probably stupid question.
Do 32 bit and 64 bit applications of the same software look identical in hex editors?
So for example if you patched a 32 bit program, can you use a hex editor to patch the 64 bit version by find/replace the same hex patterns?

I'm trying to do the same thing as OP but don't understand anything you guys are talking about x.x

disavowed
September 18th, 2012, 19:03
No, they't not identical. If they were identical then you wouldn't need two different versions to begin with.