What program can you use to determine if the full header info was indeed created or not?
I'd like to know too.
What I've found is that the patching tools are dumping a fuller header than the unpatched tools but I don't know if that means the complete header is being dumped.
Doing a (quick and dirty) binary file comparison, I found the unpatched tools are zero-padding certain memory addresses. I've got a list of the addresses now.
I'm thinking these tools are good, though.
This post has been edited by windsur, Thu, February 25th, 2010 at 20:57
Thu, February 25th, 2010 at 17:24
top
multi
options
