Skip to content

Instantly share code, notes, and snippets.

@fanquake

fanquake/dmg_tool.md Secret

Created January 25, 2020 13:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save fanquake/3303ac3bc9efc63293d59df5b81d1cef to your computer and use it in GitHub Desktop.
Save fanquake/3303ac3bc9efc63293d59df5b81d1cef to your computer and use it in GitHub Desktop.
Download ZIP
Raw
dmg_tool.md

readelf --wide --symbols {}

    @@ -232,16 +232,16 @@
         27: 0000000000002ef0     0 FUNC    LOCAL  DEFAULT   14 deregister_tm_clones
         28: 0000000000002f30     0 FUNC    LOCAL  DEFAULT   14 register_tm_clones
         29: 0000000000002f80     0 FUNC    LOCAL  DEFAULT   14 __do_global_dtors_aux
         30: 0000000000223268     1 OBJECT  LOCAL  DEFAULT   24 completed.7697
         31: 0000000000220c70     0 OBJECT  LOCAL  DEFAULT   20 __do_global_dtors_aux_fini_array_entry
         32: 0000000000002fc0     0 FUNC    LOCAL  DEFAULT   14 frame_dummy
         33: 0000000000220c68     0 OBJECT  LOCAL  DEFAULT   19 __frame_dummy_init_array_entry
    -    34: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS <elf>.c
    -    35: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS <elf>lib.c
    +    34: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS dmg.c
    +    35: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS dmglib.c
         36: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS filevault.c
         37: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS io.c
         38: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS partition.c
         39: 0000000000006dbe   138 FUNC    LOCAL  DEFAULT   14 flipEndian
         40: 0000000000223280  4096 OBJECT  LOCAL  DEFAULT   24 atapi_data
         41: 0000000000006e48    74 FUNC    LOCAL  DEFAULT   14 flipDriverDescriptor
         42: 0000000000000000     0 FILE    LOCAL  DEFAULT  ABS resources.c

readelf --wide --notes {}

    @@ -1,8 +1,8 @@
     
     Displaying notes found in: .note.ABI-tag
       Owner                 Data size	Description
       GNU                  0x00000010	NT_GNU_ABI_TAG (ABI version tag)	    OS: Linux, ABI: 3.2.0
     
     Displaying notes found in: .note.gnu.build-id
       Owner                 Data size	Description
    -  GNU                  0x00000014	NT_GNU_BUILD_ID (unique build ID bitstring)	    Build ID: 721b54cffa9227d3bdda64ad2a9bb4de668a85af
    +  GNU                  0x00000014	NT_GNU_BUILD_ID (unique build ID bitstring)	    Build ID: 237bdf16761b735f8bd99262f504ec203feae56f

readelf --wide --decompress --hex-dump=.rodata {}

    @@ -2,19 +2,19 @@
     Hex dump of section '.rodata':
       0x0001cc90 01000200 00000000 72620063 616e6e6f ........rb.canno
       0x0001cca0 74206f70 656e2073 6f757263 653a2025 t open source: %
       0x0001ccb0 730a0077 62006361 6e6e6f74 206f7065 s..wb.cannot ope
       0x0001ccc0 6e206465 7374696e 6174696f 6e3a2025 n destination: %
       0x0001ccd0 730a0000 00000000 75736167 653a2025 s.......usage: %
       0x0001cce0 73205b65 78747261 63747c62 75696c64 s [extract|build
    -  0x0001ccf0 7c69736f 7c646d67 5d203c69 6e3e203c |iso|<elf>] <in> <
    +  0x0001ccf0 7c69736f 7c646d67 5d203c69 6e3e203c |iso|dmg] <in> <
       0x0001cd00 6f75743e 20282d6b 203c6b65 793e2920 out> (-k <key>) 
       0x0001cd10 28706172 74697469 6f6e290a 002d6b00 (partition)..-k.
       0x0001cd20 65787472 61637400 25640062 75696c64 extract.%d.build
    -  0x0001cd30 0069736f 00646d67 00000000 00000000 .iso.<elf>........
    +  0x0001cd30 0069736f 00646d67 00000000 00000000 .iso.dmg........
       0x0001cd40 57726974 696e6720 6f757420 64617461 Writing out data
       0x0001cd50 2e2e0062 6c6b7800 4170706c 655f4846 ...blkx.Apple_HF
       0x0001cd60 5300424c 4b58206e 6f742066 6f756e64 S.BLKX not found
       0x0001cd70 21000000 00000000 5761726e 696e673a !.......Warning:
       0x0001cd80 20415352 20646174 61206f6e 6c792072  ASR data only r
       0x0001cd90 65766572 73652065 6e67696e 65657265 everse engineere
       0x0001cda0 6420666f 72206361 73652d73 656e7369 d for case-sensi

readelf --wide --decompress --hex-dump=.strtab {}

    @@ -5,15 +5,15 @@
       0x00000020 005f5f64 6f5f676c 6f62616c 5f64746f .__do_global_dto
       0x00000030 72735f61 75780063 6f6d706c 65746564 rs_aux.completed
       0x00000040 2e373639 37005f5f 646f5f67 6c6f6261 .7697.__do_globa
       0x00000050 6c5f6474 6f72735f 6175785f 66696e69 l_dtors_aux_fini
       0x00000060 5f617272 61795f65 6e747279 00667261 _array_entry.fra
       0x00000070 6d655f64 756d6d79 005f5f66 72616d65 me_dummy.__frame
       0x00000080 5f64756d 6d795f69 6e69745f 61727261 _dummy_init_arra
    -  0x00000090 795f656e 74727900 646d672e 6300646d y_entry.<elf>.c.dm
    +  0x00000090 795f656e 74727900 646d672e 6300646d y_entry.dmg.c.dm
       0x000000a0 676c6962 2e630066 696c6576 61756c74 glib.c.filevault
       0x000000b0 2e630069 6f2e6300 70617274 6974696f .c.io.c.partitio
       0x000000c0 6e2e6300 666c6970 456e6469 616e0061 n.c.flipEndian.a
       0x000000d0 74617069 5f646174 6100666c 69704472 tapi_data.flipDr
       0x000000e0 69766572 44657363 72697074 6f720072 iverDescriptor.r
       0x000000f0 65736f75 72636573 2e630070 6c737444 esources.c.plstD
       0x00000100 61746100 666c6970 53697a65 5265736f ata.flipSizeReso
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment