الفريق العربي للهندسة العكسية

Hi All

i like to know DLL loaders change which bytes on software

For example i have software that patched through Proxy DLL. but i dont know which bytes changed by DLL Proxy

?do you have any method to find which bytes changed by DLL proxy

?dump the exe then binary compare them

Good option. could you guide me about make dump?

Scylla in x64dbg, then use any hex compare tool, or you may check from which address is written by the dll proxy by placing a bp on VirtualProtect.