@[b]Str0x, This version seems to work pretty well, if I make a copy of PE1 and then rename the copied
PE to a differnt name. Well done! Does the tool allow to view different sections?
Q: do you know of a tool that will compare an in-memory PE file to one on the hard drive?
Or would you have the expertise to write such an app? I have tried without success.[/b]
PE to a differnt name. Well done! Does the tool allow to view different sections?
Q: do you know of a tool that will compare an in-memory PE file to one on the hard drive?
Or would you have the expertise to write such an app? I have tried without success.[/b]