An alternate direction rather than your standard jmp&#x2F;displacement&#x2F;nop&#x27;ing-to-align would be to use Dyninst[1] and live patch in memory[2]. Really though, your standard hex-editor will have facilities to alter all the necessary relatives. If you have access to modify the binary, no need to put in a trampoline (though it&#x27;s awfully handy when playing CTFs!)<p>Honestly, do we really need another static analysis tool? Hopper and radare2 have covered the open source gap fairly well. I&#x27;d put r2 on near-power-parity of IDA if you invest the time to learn and configure it, which admittedly is an expensive proposition in labor who already knows IDA. It&#x27;ll take him more days in salary to learn a new platform than just to pay the 5k and get him a IDA&#x2F;HexRays license.<p>[1] U of Maryland holds the patent; information here, <a href="https:&#x2F;&#x2F;www.google.co.uk&#x2F;patents&#x2F;US8510723" rel="nofollow">https:&#x2F;&#x2F;www.google.co.uk&#x2F;patents&#x2F;US8510723</a>
[2] <a href="https:&#x2F;&#x2F;www.cs.umd.edu&#x2F;class&#x2F;fall2005&#x2F;cmsc714&#x2F;Lectures&#x2F;byrd-dyninst-2up.pdf" rel="nofollow">https:&#x2F;&#x2F;www.cs.umd.edu&#x2F;class&#x2F;fall2005&#x2F;cmsc714&#x2F;Lectures&#x2F;byrd-...</a> Though, I&#x27;m sure you&#x27;ve seen it already