+- الفريق العربي للهندسة العكسية (https://www.at4re.net/f)
+-- قسم : منتديات الهندسة العكسية - Reverse Engineering Forums (https://www.at4re.net/f/forum-4.html)
+--- قسم : البرامج و أدوات الهندسة العكسية - RCE Tools (https://www.at4re.net/f/forum-29.html)
+--- الموضوع : Compare Two Processes v0.5 (/thread-4696.html)
Compare Two Processes v0.5 - Str0x - 09-08-2025
Compare Two Processes v0.5 x32 & x64
![[صورة مرفقة: r8vgfrL.gif]](https://i.imgur.com/r8vgfrL.gif)
التحميل من المرفقات
RE: Compare Two Processes v0.5 - Stingered - 09-08-2025
@[b]Str0x, This version seems to work pretty well, if I make a copy of PE1 and then rename the copied
PE to a differnt name. Well done! Does the tool allow to view different sections?
Q: do you know of a tool that will compare an in-memory PE file to one on the hard drive?
Or would you have the expertise to write such an app? I have tried without success.[/b]
RE: Compare Two Processes v0.5 - Str0x - 10-08-2025
(09-08-2025, 06:15 PM)Stingered كتب : Does the tool allow to view different sections
The tool compare difference of HEX of tow sections which has same section name
(09-08-2025, 06:15 PM)Stingered كتب : do you know of a tool that will compare an in-memory PE file to one on the hard drive
That not logic because if the file in hard dirve is packed and an other in memory is unpacked maybe the tool will get a crash
There is a lot of tools compare files in hard drive but in memory I never seen that's why I coded this one
RE: Compare Two Processes v0.5 - Stingered - 10-08-2025
Thx!
There is this but it doesn't work so reliable.
olliencc/WindowsPatchDetector: Experimental: Windows .text section compare - disk versus memory
RE: Compare Two Processes v0.5 - Str0x - 10-08-2025
Well the Logic is if the file in hard drive is
unpacked then its possible I think
But if the file is packed in hard drive then no way really
I dont know this tool i will test it
unpacked then its possible I think
But if the file is packed in hard drive then no way really
I dont know this tool i will test it
RE: Compare Two Processes v0.5 - Stingered - 11-08-2025
If you would be so kind, pls let me knwow what you determine from your testing. -TY
RE: Compare Two Processes v0.5 - Str0x - 12-08-2025
(11-08-2025, 09:27 PM)Stingered كتب : pls let me knwow what you determine from your testing.
Tested...Not interested