integrity_check_poc

POC of integrity check

How this shit works

• make a table using VirtualAlloc() and fill them with encrypted original .text section's binaries.
• call check_text_section() to check if there is corrupted binaries

TODO:

• VirtualAlloc() can fail and creating a new page is vulnerable.
• You can reduce the size of the table.