RamDumpCmp – find differences in the groups of binary files

This program is designed to find differences in the groups of binary files. Download any 2 or 3 groups of files (in columns A, B, or A, B, C). Each group ignored the bytes that differ within the group. Then compared between the groups of remaining bytes. The bytes that differ between groups – this is the desired results, their addresses are stored in a text file. The practical application of this – for revers. For example, you should look into the RAM storage device some options. Done by some (to screen foreign change) dump RAM in different states of the desired option. Then use RamDumpCmp eliminated foreign addresses and calculates the address associated with the change option.

Example of finding differences.
Group A Group B Group C
file1a

00000000 E0 B7 97 DC 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 27 CD BB 75 47 2C DD 15
00000018 6B 62 AB 1A 02 1A D0 FA
file1b

00000000 1B CC 88 4C 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 99 52 B5 75 47 2C DD 18
00000018 6B 62 AB 1A 02 1A D0 FA
file1c

00000000 0C 08 67 B2 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 CA 89 4B 75 47 2C DD BA
00000018 6B 62 AB 1A 02 1A D0 FA
file2a

00000000 10 A7 01 DC 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 27 CD BB 75 47 2C DD 15
00000018 6B 62 AB 1A 02 1A D0 FA
file2b

00000000 B8 8D C9 4C 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 99 52 B5 75 47 2C DD 18
00000018 6B 62 AB 1A 02 1A D0 FA
file2c

00000000 28 A3 DC B2 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 CA 89 4B 9A F4 96 00 BA
00000018 6B 62 AB 1A 02 1A D0 FA
file3a

00000000 10 A7 01 DC 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 99 52 BB 1F 0F 9C 66 15
00000018 6B 62 AB 1A 02 1A D0 FA
file3b

00000000 B8 8D C9 4C 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 99 52 B5 75 47 2C DD 18
00000018 6B 62 AB 1A 02 1A D0 FA
file3c

00000000 28 A3 DC B2 38 07 FF 51
00000008 E0 C9 D3 FF E2 61 22 8D
00000010 CA 89 4B 9A F4 96 00 BA
00000018 6B 62 AB 1A 02 1A D0 FA
Found addresses: 00000003, 00000012, 00000017.

Screenshot RamDumpCmp

History of development program:
v.1.1.0.0 (2016.02.18) Minor changes in GUI.
v.1.0.0.0 (2012.12.26) First public version.

Download “RamDumpCmp_v11.rar” – 8.61 KBVersion 1.1, 2016-02-18 20:54