New
#11
Executable still compares the files i have with ones in update 7 maybe and of course it finds errors. I am sure was patched the executable too. Are these errors related to MD5 Hash? There's a method to know that?
Executable still compares the files i have with ones in update 7 maybe and of course it finds errors. I am sure was patched the executable too. Are these errors related to MD5 Hash? There's a method to know that?
I can't answer your question, I don't own a copy of Hitman so I cannot know if MD5 hash relates to this...
K, if there's something else you can deduce from my dump i would be happy. If this is what you can get from it, i wish you good day.
There isn't much you can get from the dump other than a few memory addresses and the function where the problem occured.
The dump isn't complete though, the function where the problem occured doesn't come back in the stack, or better said the stack text is as good as empty because:
No I don't know where a more complete dump could be.Code:User Mini Dump File: Only registers, stack and portions of memory are available
Could do a full memory dump the moment before the crash happens, but i'm afraid it should be useless.
Last edited by Be4stElectrjc; 03 Jun 2016 at 07:34.
A full memory dump contains everything of the memory, why do you think it should be useless? A full memory dump is the max you can get.
Because is an image of the memory in a normal runtime state, the crash isn't happened yet. From that you need to compare each address, register and stack entry to the one from mini dump i provided.
Access denied with all the debuggers i have, it has for sure Anti-Debugging systems. But in this case we don't want to do Reverse Engineering, just want to understand more in deep the problem.
Only option is maybe a real full memory dump, but i have 64GB of RAM, shoud be a problem.
Found clean Update 9.
Last edited by Be4stElectrjc; 03 Jun 2016 at 08:29.
A full memory dump contains both kernel and user mode data of which the user mode data is the part that takes most of the space.
Thanks.
You're welcome, though I haven't done much.
Then you need to get a better dump somehowjust want to understand more in deep the problem.