I have two exe files a patched one and the original one (the original one was patched using x64dbg), I want to know what are the differences between the two files using x64dbg or ollydbg.Which mean I want to know where the original file was modified with x64dbg. thanks.
how to compare two exe files with x64dbg
1.4k Views Asked by walid761 At
2
There are 2 best solutions below
Related Questions in EXE
- How to request administrator rights?
- Wix bundle of third party exe and new msi cant figure out detect conditions
- Unable to run get .exe file from assembly NASM
- Combining Dependent DLL Files with Executable using windeployqt
- How do i convert a typescript nodejs project into a single executable exe
- Exe file missing icons/images on Network Drive
- Change an exe file's compatibility settings with C#
- OAuth implementation with WINUI unpackaged app not working
- Python Kivy project is not getting Converted into portable .exe file
- Converting the Python file (from the Kivi library used in it) to an executable file
- How to send keystrokes to an inactive window
- Cannot include ffmpeg.exe using auto-py-to-exe
- VST SDK Steinberk/ VST3 Project Generator not opening
- Editing the exe program in jetbrains rider avalonia
- Problem executing a JavaFX by double-clicking
Related Questions in REVERSE-ENGINEERING
- How to find a sequence of bytes on the target program from my injected dll?
- Reversing and vtable swapping in dxgi.dll
- How to know Vector3 Position in Unity Mono Game
- Extracting an archive created via Java RandomAccessFile with PHP
- How can I verbosely track the whole process of calling a function?
- How can I patch a function call to a Windows DLL (e.g. kernel32 LoadLibrary)? Is this even possible?
- Grab SSL pinning certificate using Frida on iOS
- Kaitai Struct: error accessing elements in _parent
- How to restore damaged (mp3?) file
- CGSRegionRef: How is an arbitrary region represented as union of rects?
- can a convolutional neural network be reverse engineered?
- Decode suspected timestamps
- Extract Note Text Format (Bold/Italic/Strikethrough) from iOS OTG Backup
- Reverse engineer LCD Protocol used in MPC2000XL
- Opening a serial port using a prebuilt .so library
Related Questions in PATCH
- Yocto kernel patch fails with git am
- Cargo patch to redirect registry to local path without having to call cargo login
- Sharepoint 2016 timer service cannot start after applying windows OS patch KB5035855
- How can I patch a function call to a Windows DLL (e.g. kernel32 LoadLibrary)? Is this even possible?
- How do I update data in my JSON file using Postman?
- How do I apply this apache patch: rewrite-windows-testchar-h.patch
- How to distinguish two PATCH operations for the same enity
- Patching UEFI Pei module problems with addresses
- Marklogic versioning
- How to use New-AzConfigurationAssignment Powershell cmdlet for Dynamic Scope for different subscriptions -Azure update manager
- Patch executable is deleted by windows defender but the same was not deleted in earlier build patches
- How to make patch(1) use the answer with +++ instead of asking
- Create "git format-patch" output from existing "diff" file
- Laravel PATCH validation fails in controller
- Edite https://graph.microsoft.com/v1.0/admin/people/profileCardProperties
Related Questions in OLLYDBG
- x64dbg jump arrows disappears when scrolling the page
- Patching a file with x64dbg after finding ram addresses
- Save memory dump edit into an exe file in OllyDbg
- how to compare two exe files with x64dbg
- Why conditional breakpoint doesn't work in some address in ollydbg?
- How to know number of parameters in x86-64 assemble(windows)
- How can I import my breakpoint from OllyDBG to my C++ code?
- create symbol or rename a function inside WinDBG
- How to replace a store of EAX with a store of an immediate constant?
- Runtime error C0000005 of an unpacked executable file [UPX 3.91+]
- Trying to determine and change "Nation/locale/region Code" for application inside disassembler
- OllyDbg not properly interpreting SSE2 instructions and operands
- Interruption service in assembler (int 21h) and it's behavior (w/OllyDbg)
- Is digital certificate of PE(Portable Executable) file is in overlay of file?
- OllyDbg - How can I add more instruction space to a .exe file?
Related Questions in X64DBG
- X64dbg not showing me strings
- Can't find a strings on x64dbg, IDA PRO
- x64dbg jump arrows disappears when scrolling the page
- Shellcoding emacs to make it run vim
- Debugging a .so file, compiled by cython
- Alternatives of " Find OEP by section hop " for X64dbg
- X64dbg is not loading program expected address space (Not same as Ghidra shows)
- Patching a file with x64dbg after finding ram addresses
- x64dbg injection is not avaliable
- Understanding the logic behind decompiled code
- Printf or MessageBox in ASM for debugging
- how to compare two exe files with x64dbg
- fmul st(0), qword ptr ss:[ebp-10] -> debugging in x64dbg
- create symbol or rename a function inside WinDBG
- How to monitor Kernel callbacks
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
You shouldn't use a debugger to do this, use a diff tool instead. These are some tools that can compare binary files:
These tools only compare the differences in bytes without disassembling them, but knowing the offsets of the differences you could easily take a look at the opcodes in x64dbg.
There is also an IDA plugin for this: patchdiff2, although I haven't tried this one. You can also consider writing your own x64dbg plugin, it shouldn't be too hard.