edb_compare_sections
Compare loaded memory sections to the original binary to detect modifications such as self-modifying code or patches.
Instructions
Compare loaded memory sections with the original binary on disk. Detects modifications to code sections (self-modifying code, patches). Equivalent to EDB's memory comparison features.
Returns: str: Section comparison results
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |