Results 1 to 11 of 11

Thread: make in aix5 creating exe with different cksum.please help.

  1. #1
    net_invade
    Guest

    Post make in aix5 creating exe with different cksum.please help.

    i have make utlity in aix 5 creating the exe with different checksum for each build i create. the source comprises of .pc (which will generate .c ) and two header files.could not identify anything time dependent.every time i build using make , it create c file with same checksum and object and exe with different checksums. anyone could explain this ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    I would just about bet that there is "Build time" being included in there somewhere. If I were you, I would build the exe, rename it, rebuild it, and then compare the 2 to see where the changed bytes are.

    Furthermore, I would do the same with the object file (.o?) as well.

  3. #3
    net_invade
    Guest
    Thanks a lot ! I did diff for the two exe-s and found the build time incorporated in exe.eg :
    Sat Dec 27 22:30:19 2008 ĚC for AIX Compiler Version 6.0.0.0 ---

    So how can i make sure that the two exe-s made at different time are identical ?(i mean the exe which is created from same source code but built at different time). if i remove the exe alone keeping the outfiles intact , "sum -i " gives me the same out put.is there any other way to exclude these time factors and give a cksum ?

    Thanks again for your help !
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Well, I know nothing about AIX really, so it sounds like you are in for some studying of the toolchain to see if there is a way to NOT include the build time.

    As a secondary option, you could write a little app that you use as a "post built processor" that sets the time to some agreed upon value so that THAT part is always the same.

  5. #5
    net_invade
    Guest
    thats a good idea.i guess i can use that as a reusable component as well.now my attention is towards how can i modify the binary information in the exe.coz two places in exe , the time is in text foramt.but at header its in binary format.if you have any idea of modifying binary information manually ,wud love to hear that.thanks again for ur time n help !
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    Quote Originally Posted by net_invade View Post
    thats a good idea.i guess i can use that as a reusable component as well.now my attention is towards how can i modify the binary information in the exe.coz two places in exe , the time is in text foramt.but at header its in binary format.if you have any idea of modifying binary information manually ,wud love to hear that.thanks again for ur time n help !
    He he he.

    fopen
    fread
    buffer[x] = 0x00;
    ...
    fwrite
    fclose


  7. #7
    net_invade
    Guest
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #8
    Quote Originally Posted by net_invade View Post
    I left out the fseek stage. Which is needed, because after the read, the read pointer will be PAST the bytes you just read, so you need to reposition it before the write.

    Let me know if that doesn't make sense.

  9. #9
    net_invade
    Guest
    I was trying to identify how can i locate the first byte of exe , created by xlc_r in aix 5.i cud get the header format from somewhere.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  10. #10
    Quote Originally Posted by net_invade View Post
    I was trying to identify how can i locate the first byte of exe , created by xlc_r in aix 5.i cud get the header format from somewhere.
    Hmm.. If the format is like that of MOST compilers, and systems, you could search for the bytes that surround the time. There may be some sorta format in there.

    Compile up a couple of files, and compare them, see if the bytes surrounding the time are the same. If so, you could search for them.

  11. #11
    net_invade
    Guest
    ok..will try that approach.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. creating win32 api == ?
    By shakuni in forum Advanced Reversing and Programming
    Replies: 6
    Last Post: May 10th, 2008, 18:45
  2. A question about creating process
    By Hero in forum Advanced Reversing and Programming
    Replies: 12
    Last Post: September 17th, 2007, 21:42
  3. creating protected install package
    By foffa in forum The Newbie Forum
    Replies: 11
    Last Post: June 25th, 2007, 04:21
  4. Using original .idata instead of creating new section
    By doctorow in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: August 22nd, 2003, 09:53
  5. loader32 deletes my .nms file after creating it?
    By latigo in forum Tools of Our Trade (TOT) Messageboard
    Replies: 4
    Last Post: August 3rd, 2001, 17:16

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •