/Inline-PatchFinder

comparing data of module exports from disk and memory, then caching any differences.

Primary LanguageC

Inline-PatchFinder

Need to see if the process you're reversing/analyzing is patching/hooking any loaded module's exports? Well, look no further.

Inline-PatchFinder traverses the export table of all loaded modules in a process, and compares the first few bytes to the module on disk. If there is a difference between the one in memory and disk, you will be given relevant information.

ikFLJjM

Credits: