Cheat Engine

ernie · Posted: Wed Jun 11, 2008 1:20 pm Post subject: Anyway to compre two executables?

I have two copies of an executable. One is a more recently patched version of the executable. I'm interested in seeing what they changed with the executable in the patch and trying to find an easy way to compare them. Any idea how? I usually edit them using only hex workshop.

Pingo · Posted: Wed Jun 11, 2008 2:59 pm Post subject:

I wonder if pe builder would do the job.

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

ernie
Since your using hex workshop, it has a compare for you.
But if your going to compare the files. They need to be unpacked.

Also there are other tools you can use to compare the files as well.
The differences you see you can pop in olly at the address of the change and see what it handles by setting a break point on it.

ernie · Posted: Wed Jun 11, 2008 10:50 pm Post subject:

Thanks. I got a newer version of HW which had a working compare function. My last one did not. I can't figure out how to search for multiple changes however, as it only seems to stop at the first one. But I just started messing with it right now.

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

If you look in the lower right of it, you see matched and changed,deleted,added. Those are all the changes.

Also i would look into what X0r posted. It seems to be a great tool to add to anyone arsenal.