الفريق العربي للهندسة العكسية
How to find DLL loaders change which bytes? - نسخة قابلة للطباعة

+- الفريق العربي للهندسة العكسية (https://www.at4re.net/f)
+-- قسم : ENGLISH FORUM (https://www.at4re.net/f/forum-6.html)
+--- قسم : General Discussion (https://www.at4re.net/f/forum-13.html)
+--- الموضوع : How to find DLL loaders change which bytes? (/thread-3690.html)



How to find DLL loaders change which bytes? - KaMaN99 - 11-11-2023

Hi All

i like to know DLL loaders change which bytes on software

For example i have software that patched through Proxy DLL. but i dont know which bytes changed by DLL Proxy

?do you have any method to find which bytes changed by DLL proxy



RE: How to find DLL loaders change which bytes? - SeGNMeNT - 11-11-2023

?dump the exe then binary compare them



RE: How to find DLL loaders change which bytes? - KaMaN99 - 11-11-2023

Good option. could you guide me about make dump?



RE: How to find DLL loaders change which bytes? - SeGNMeNT - 11-11-2023

Scylla in x64dbg, then use any hex compare tool, or you may check from which address is written by the dll proxy by placing a bp on VirtualProtect.