lirent 50ed32b7dc Add function-level code diff over caller-supplied views ...

code_diff compares two views of the same code in one coordinate space - an
on-disk image section against the live in-memory section, or one .text across
two snapshots - and reports the functions whose body changed. For each function
extent it func_hash()es the slice of each view and flags a mismatch: a patch, an
inline hook, or an unpacked/JIT-rewritten body. A thin handler over func_hash +
mem_sub, with no file I/O of its own - the caller owns reading the on-disk image.
The relocation limit (absolute-address immediates) is documented; two snapshots
at the same base diff exactly. Closes the non-starred reversing series.

2026-06-16 20:21:36 +03:00

..

codeanalysis.h

Add function-level code diff over caller-supplied views

2026-06-16 20:21:36 +03:00

memmodel.h

Keep the arch layer's prose consumer-agnostic; note the x86-64 binding

2026-06-15 12:07:43 +03:00

pmap.h

Add process-scoped scanning algorithms: multi-pattern, code-xref, pointer-map, dissection, snapshot diff

2026-06-16 17:38:10 +03:00

scan.h

Add code-structure analysis: call graph, jump tables, basic blocks, constant xref

2026-06-16 19:52:25 +03:00

siggen.h

Add function inventory (.pdata), signature generation, and export/PDB symbols

2026-06-16 19:27:42 +03:00

sigscan.h

Add process-scoped scanning algorithms: multi-pattern, code-xref, pointer-map, dissection, snapshot diff

2026-06-16 17:38:10 +03:00

snapdiff.h

Add process-scoped scanning algorithms: multi-pattern, code-xref, pointer-map, dissection, snapshot diff

2026-06-16 17:38:10 +03:00

win32.h

Add imports, inline-hook detection, function hashing, per-function imports

2026-06-16 20:03:49 +03:00

x86dec.h

Add code-structure analysis: call graph, jump tables, basic blocks, constant xref

2026-06-16 19:52:25 +03:00