10-04-2011, 10:25 PM
Hi, I folow your advice but to parse the file I have a problem,
how many bytes each field occupies the structure. Since I did this task and the results are as follows
typedef struct
{
uint version_bin; 4 bytes
char cwd[256]; 256 bytes
uint argc; 4 bytes
char argv[30][256]; 7680 bytes
uint pw_min; 4 bytes
uint64 pw_skip; 8 bytes
pid_t pid; 4 bytes (int)
char unused[228]; 228 bytes
} restore_data_t;
If you add up the bytes of each field that results in 8188 bytes, but the file in my oclhashcat-lite v0.06 “oclHashcat-lite.restore†has 8192 bytes, so i have 4 bytes of difference. I can not do anything until we find out why those 4 bytes of difference.
how many bytes each field occupies the structure. Since I did this task and the results are as follows
typedef struct
{
uint version_bin; 4 bytes
char cwd[256]; 256 bytes
uint argc; 4 bytes
char argv[30][256]; 7680 bytes
uint pw_min; 4 bytes
uint64 pw_skip; 8 bytes
pid_t pid; 4 bytes (int)
char unused[228]; 228 bytes
} restore_data_t;
If you add up the bytes of each field that results in 8188 bytes, but the file in my oclhashcat-lite v0.06 “oclHashcat-lite.restore†has 8192 bytes, so i have 4 bytes of difference. I can not do anything until we find out why those 4 bytes of difference.