Reputation: 35
I have two exe files a patched one and the original one (the original one was patched using x64dbg), I want to know what are the differences between the two files using x64dbg or ollydbg.Which mean I want to know where the original file was modified with x64dbg. thanks.
Upvotes: 1
Views: 2266
Reputation: 35
i still couldn't find exact solution. lets assume that i patched File1.exe with x64dbg and saved, i want to compare file1.exe and patchedfile.exe by looking through jmp je mov dissasembled sections.
Upvotes: 0
Reputation: 1233
You shouldn't use a debugger to do this, use a diff tool instead. These are some tools that can compare binary files:
These tools only compare the differences in bytes without disassembling them, but knowing the offsets of the differences you could easily take a look at the opcodes in x64dbg.
There is also an IDA plugin for this: patchdiff2, although I haven't tried this one. You can also consider writing your own x64dbg plugin, it shouldn't be too hard.
Upvotes: 2