ch4ncellor / Inline-PatchFinder

comparing data of module exports from disk and memory, then caching any differences.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Inline-PatchFinder

Need to see if the process you're reversing/analyzing is patching/hooking any loaded module's exports? Well, look no further.

Inline-PatchFinder traverses the export table of all loaded modules in a process, and compares the first few bytes to the module on disk. If there is a difference between the one in memory and disk, you will be given relevant information.

ikFLJjM

Credits:

About

comparing data of module exports from disk and memory, then caching any differences.


Languages

Language:C 97.8%Language:C++ 2.2%