Very simple plugin to diff a section in memory with a file.
In this example we have program_original.exe and program_modified.exe and we want to diff them. In this example we are diffing the .text section, which is located at VA 0x00401000.
- Create a dump of a file's sections with
python dumpsec.py program_modified.exe - Open
program_original.exein x64dbg - Run the command
diff 0x00401000, "C:\path\to\section00.text.bin" - The difference will be applied as a patch which you can export (See Patches dialog with Ctrl+P)
