walid761
walid761

Reputation: 35

how to compare two exe files with x64dbg

I have two exe files a patched one and the original one (the original one was patched using x64dbg), I want to know what are the differences between the two files using x64dbg or ollydbg.Which mean I want to know where the original file was modified with x64dbg. thanks.

Upvotes: 1

Views: 2266

Answers (2)

Halil Nevzat Demirel
Halil Nevzat Demirel

Reputation: 35

i still couldn't find exact solution. lets assume that i patched File1.exe with x64dbg and saved, i want to compare file1.exe and patchedfile.exe by looking through jmp je mov dissasembled sections.

Upvotes: 0

thedemons
thedemons

Reputation: 1233

You shouldn't use a debugger to do this, use a diff tool instead. These are some tools that can compare binary files:

These tools only compare the differences in bytes without disassembling them, but knowing the offsets of the differences you could easily take a look at the opcodes in x64dbg.

There is also an IDA plugin for this: patchdiff2, although I haven't tried this one. You can also consider writing your own x64dbg plugin, it shouldn't be too hard.

Upvotes: 2

Related Questions