0

I have two .exe files and one of them was debugged by someone, i want to compare it with the original one and find the codes that was changed, is it possible to do that ? If it's, how can i do it ? ( i mean just the changed codes only )

3
  • Start run cmd /k fc /b f#x.exe s#x.exe
    – blabb
    Jul 15, 2016 at 14:05
  • I guess you wanted to say one of them is a patched, not debugged, version of the other? Jul 15, 2016 at 18:41
  • kinda, patched, edited, can i find out the code that changed ? Jul 16, 2016 at 3:18

1 Answer 1

1

Open the patched file in OllyDbg. Right click on CPU pane and choose "Select all" from Edit. Again right click on the CPU pane and select "Binary copy" or press Ctrl+Insert.

Close current session and open the original file.

Right click on CPU pane and choose "Select all" from Edit. Again right click on the CPU pane and select "Binary paste" or press Shift+Insert.

Now from the CPU pane right click menu, select "Search for" then select "All modifications" The result would be shown in a new window.

1
  • @GiaHuyTrần If it answers your question, please accept it. Thanks.
    – Jango
    Jul 16, 2016 at 5:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.