arm64-linux hacking; returns from upx_main(), only launch remains!
modified: stub/src/arch/arm64/v8/lzma_d.S modified: stub/src/arch/arm64/v8/nrv2b_d32.S modified: stub/src/arch/arm64/v8/nrv2d_d32.S modified: stub/src/arch/arm64/v8/nrv2e_d32.S modified: stub/src/arm64-linux.elf-entry.S modified: stub/src/arm64-linux.elf-fold.S modified: stub/src/arm64-linux.elf-main.c modified: stub/arm64-darwin.macho-entry.h modified: stub/arm64-linux.elf-entry.h modified: stub/arm64-linux.elf-fold.h modified: stub/arm64-linux.shlib-init.h modified: stub/tmp/arm64-darwin.macho-entry.bin.dump modified: stub/tmp/arm64-linux.elf-entry.bin.dump modified: stub/tmp/arm64-linux.elf-fold.map modified: stub/tmp/arm64-linux.shlib-init.bin.dump
This commit is contained in:
John Reiser
@@ -5,11 +5,11 @@ Idx Name Size VMA LMA File off Algn
|
||||
0 MACHMAINX 00000044 0000000000000000 0000000000000000 00000040 2**0 CONTENTS, RELOC, READONLY
|
||||
1 NRV_HEAD 00000000 0000000000000000 0000000000000000 00000084 2**0 CONTENTS, READONLY
|
||||
2 NRV2E 00000128 0000000000000000 0000000000000000 00000084 2**0 CONTENTS, READONLY
|
||||
3 NRV2D 00000128 0000000000000000 0000000000000000 000001ac 2**0 CONTENTS, READONLY
|
||||
4 NRV2B 00000100 0000000000000000 0000000000000000 000002d4 2**0 CONTENTS, READONLY
|
||||
5 NRV_TAIL 000004b4 0000000000000000 0000000000000000 000003d4 2**0 CONTENTS, READONLY
|
||||
6 MACHMAINY 00000000 0000000000000000 0000000000000000 00000888 2**0 CONTENTS, READONLY
|
||||
7 MACHMAINZ 00000058 0000000000000000 0000000000000000 00000888 2**0 CONTENTS, READONLY
|
||||
3 NRV2D 0000011c 0000000000000000 0000000000000000 000001ac 2**0 CONTENTS, READONLY
|
||||
4 NRV2B 000000f0 0000000000000000 0000000000000000 000002c8 2**0 CONTENTS, READONLY
|
||||
5 NRV_TAIL 000004b4 0000000000000000 0000000000000000 000003b8 2**0 CONTENTS, READONLY
|
||||
6 MACHMAINY 00000000 0000000000000000 0000000000000000 0000086c 2**0 CONTENTS, READONLY
|
||||
7 MACHMAINZ 00000058 0000000000000000 0000000000000000 0000086c 2**0 CONTENTS, READONLY
|
||||
SYMBOL TABLE:
|
||||
0000000000000000 l d MACHMAINZ 0000000000000000 MACHMAINZ
|
||||
0000000000000000 l d MACHMAINX 0000000000000000 MACHMAINX
|
||||
@@ -21,8 +21,8 @@ SYMBOL TABLE:
|
||||
0000000000000000 l d MACHMAINY 0000000000000000 MACHMAINY
|
||||
0000000000000000 g MACHMAINX 0000000000000000 _start
|
||||
0000000000000000 g F NRV2E 0000000000000128 ucl_nrv2e_decompress_32
|
||||
0000000000000000 g F NRV2D 0000000000000128 ucl_nrv2d_decompress_8
|
||||
0000000000000000 g F NRV2B 0000000000000100 ucl_nrv2b_decompress_8
|
||||
0000000000000000 g F NRV2D 000000000000011c ucl_nrv2d_decompress_32
|
||||
0000000000000000 g F NRV2B 00000000000000f0 ucl_nrv2b_decompress_32
|
||||
0000000000000000 g NRV_TAIL 0000000000000000 LzmaDecode
|
||||
0000000000000000 g MACHMAINY 0000000000000000 end_decompress
|
||||
|
||||
|
||||
@@ -2,17 +2,17 @@ file format elf64-littleaarch64
|
||||
|
||||
Sections:
|
||||
Idx Name Size VMA LMA File off Algn Flags
|
||||
0 ELFMAINX 00000040 0000000000000000 0000000000000000 00000040 2**2 CONTENTS, RELOC, READONLY
|
||||
1 LUNMP000 00000004 0000000000000000 0000000000000000 00000080 2**2 CONTENTS, READONLY
|
||||
2 LUNMP001 00000004 0000000000000000 0000000000000000 00000084 2**2 CONTENTS, READONLY
|
||||
3 ELFMAINXu 000000bc 0000000000000000 0000000000000000 00000088 2**2 CONTENTS, RELOC, READONLY
|
||||
4 NRV_HEAD 00000000 0000000000000000 0000000000000000 00000144 2**0 CONTENTS, READONLY
|
||||
5 NRV_TAIL 00000000 0000000000000000 0000000000000000 00000144 2**0 CONTENTS, READONLY
|
||||
6 NRV2E 00000128 0000000000000000 0000000000000000 00000144 2**2 CONTENTS, READONLY
|
||||
7 NRV2D 00000114 0000000000000000 0000000000000000 0000026c 2**2 CONTENTS, READONLY
|
||||
8 NRV2B 0000059c 0000000000000000 0000000000000000 00000380 2**2 CONTENTS, READONLY
|
||||
9 ELFMAINY 0000003e 0000000000000000 0000000000000000 0000091c 2**2 CONTENTS, READONLY
|
||||
10 ELFMAINZ 00000000 0000000000000000 0000000000000000 0000095a 2**0 CONTENTS, READONLY
|
||||
0 ELFMAINX 0000003c 0000000000000000 0000000000000000 00000040 2**2 CONTENTS, RELOC, READONLY
|
||||
1 LUNMP000 00000000 0000000000000000 0000000000000000 0000007c 2**0 CONTENTS, READONLY
|
||||
2 LUNMP001 00000000 0000000000000000 0000000000000000 0000007c 2**0 CONTENTS, READONLY
|
||||
3 ELFMAINXu 000000a8 0000000000000000 0000000000000000 0000007c 2**2 CONTENTS, RELOC, READONLY
|
||||
4 NRV_HEAD 00000000 0000000000000000 0000000000000000 00000124 2**0 CONTENTS, READONLY
|
||||
5 NRV_TAIL 00000000 0000000000000000 0000000000000000 00000124 2**0 CONTENTS, READONLY
|
||||
6 NRV2E 00000128 0000000000000000 0000000000000000 00000124 2**2 CONTENTS, READONLY
|
||||
7 NRV2D 0000011c 0000000000000000 0000000000000000 0000024c 2**2 CONTENTS, READONLY
|
||||
8 NRV2B 000005a4 0000000000000000 0000000000000000 00000368 2**2 CONTENTS, READONLY
|
||||
9 ELFMAINY 0000003e 0000000000000000 0000000000000000 0000090c 2**2 CONTENTS, READONLY
|
||||
10 ELFMAINZ 00000000 0000000000000000 0000000000000000 0000094a 2**0 CONTENTS, READONLY
|
||||
SYMBOL TABLE:
|
||||
0000000000000000 l d ELFMAINY 0000000000000000 ELFMAINY
|
||||
0000000000000000 l d ELFMAINX 0000000000000000 ELFMAINX
|
||||
@@ -31,9 +31,9 @@ SYMBOL TABLE:
|
||||
0000000000000000 *UND* 0000000000000000 ADRM
|
||||
0000000000000014 g ELFMAINX 0000000000000000 _start
|
||||
0000000000000000 g F NRV2E 0000000000000128 ucl_nrv2e_decompress_32
|
||||
0000000000000000 g F NRV2D 0000000000000114 ucl_nrv2d_decompress_8
|
||||
0000000000000000 g F NRV2B 00000000000000e8 ucl_nrv2b_decompress_8
|
||||
00000000000000e8 g NRV2B 0000000000000000 LzmaDecode
|
||||
0000000000000000 g F NRV2D 000000000000011c ucl_nrv2d_decompress_32
|
||||
0000000000000000 g F NRV2B 00000000000000f0 ucl_nrv2b_decompress_32
|
||||
00000000000000f0 g NRV2B 0000000000000000 LzmaDecode
|
||||
0000000000000000 g ELFMAINY 0000000000000000 end_decompress
|
||||
0000000000000000 g ELFMAINZ 0000000000000000 cpr0
|
||||
|
||||
@@ -46,4 +46,4 @@ OFFSET TYPE VALUE
|
||||
|
||||
RELOCATION RECORDS FOR [ELFMAINXu]:
|
||||
OFFSET TYPE VALUE
|
||||
0000000000000028 R_AARCH64_CONDBR19 ELFMAINY
|
||||
0000000000000024 R_AARCH64_CONDBR19 ELFMAINY
|
||||
|
||||
@@ -8,44 +8,44 @@ Linker script and memory map
|
||||
|
||||
0x00000000001000bc . = ((0x100000 + SIZEOF_HEADERS) + 0xc)
|
||||
|
||||
.text 0x00000000001000bc 0x874
|
||||
.text 0x00000000001000bc 0x818
|
||||
*(.text)
|
||||
.text 0x00000000001000bc 0x2cc tmp/arm64-linux.elf-fold.o
|
||||
0x00000000001002b8 my_bkpt
|
||||
0x00000000001002c0 exit
|
||||
0x00000000001002c8 read
|
||||
0x00000000001002d4 write
|
||||
0x00000000001002e0 open
|
||||
0x00000000001002ec close
|
||||
0x00000000001002f8 unlink
|
||||
0x0000000000100304 getpid
|
||||
0x0000000000100310 brk
|
||||
0x000000000010031c readlink
|
||||
0x0000000000100328 munmap
|
||||
0x0000000000100334 mprotect
|
||||
0x0000000000100340 __clear_cache
|
||||
0x0000000000100354 mmap
|
||||
0x0000000000100370 mmap_privanon
|
||||
.text 0x0000000000100388 0x5a8 tmp/arm64-linux.elf-main.o
|
||||
0x00000000001007dc upx_main
|
||||
.text 0x00000000001000bc 0x270 tmp/arm64-linux.elf-fold.o
|
||||
0x0000000000100234 my_bkpt
|
||||
0x000000000010023c exit
|
||||
0x0000000000100244 read
|
||||
0x0000000000100250 write
|
||||
0x000000000010025c close
|
||||
0x0000000000100268 unlink
|
||||
0x0000000000100274 getpid
|
||||
0x0000000000100280 brk
|
||||
0x000000000010028c munmap
|
||||
0x0000000000100298 mprotect
|
||||
0x00000000001002a4 mmap_privanon
|
||||
0x00000000001002b4 mmap
|
||||
0x00000000001002c0 open
|
||||
0x00000000001002e4 readlink
|
||||
0x0000000000100318 __clear_cache
|
||||
.text 0x000000000010032c 0x5a8 tmp/arm64-linux.elf-main.o
|
||||
0x0000000000100780 upx_main
|
||||
*(.data)
|
||||
.data 0x0000000000100930 0x0 tmp/arm64-linux.elf-fold.o
|
||||
.data 0x0000000000100930 0x0 tmp/arm64-linux.elf-main.o
|
||||
.data 0x00000000001008d4 0x0 tmp/arm64-linux.elf-fold.o
|
||||
.data 0x00000000001008d4 0x0 tmp/arm64-linux.elf-main.o
|
||||
|
||||
.iplt 0x0000000000100930 0x0
|
||||
.iplt 0x0000000000100930 0x0 tmp/arm64-linux.elf-fold.o
|
||||
.iplt 0x00000000001008d4 0x0
|
||||
.iplt 0x00000000001008d4 0x0 tmp/arm64-linux.elf-fold.o
|
||||
|
||||
.rela.dyn 0x0000000000100930 0x0
|
||||
.rela.iplt 0x0000000000100930 0x0 tmp/arm64-linux.elf-fold.o
|
||||
.rela.dyn 0x00000000001008d8 0x0
|
||||
.rela.iplt 0x00000000001008d8 0x0 tmp/arm64-linux.elf-fold.o
|
||||
|
||||
.data
|
||||
LOAD tmp/arm64-linux.elf-fold.o
|
||||
LOAD tmp/arm64-linux.elf-main.o
|
||||
OUTPUT(tmp/arm64-linux.elf-fold.bin elf64-littleaarch64)
|
||||
|
||||
.igot.plt 0x0000000000100930 0x0
|
||||
.igot.plt 0x0000000000100930 0x0 tmp/arm64-linux.elf-fold.o
|
||||
.igot.plt 0x00000000001008d8 0x0
|
||||
.igot.plt 0x00000000001008d8 0x0 tmp/arm64-linux.elf-fold.o
|
||||
|
||||
.bss 0x0000000000100930 0x0
|
||||
.bss 0x0000000000100930 0x0 tmp/arm64-linux.elf-fold.o
|
||||
.bss 0x0000000000100930 0x0 tmp/arm64-linux.elf-main.o
|
||||
.bss 0x00000000001008d4 0x0
|
||||
.bss 0x00000000001008d4 0x0 tmp/arm64-linux.elf-fold.o
|
||||
.bss 0x00000000001008d4 0x0 tmp/arm64-linux.elf-main.o
|
||||
|
||||
@@ -6,10 +6,10 @@ Idx Name Size VMA LMA File off Algn
|
||||
1 NRV_HEAD 00000000 0000000000000000 0000000000000000 00000064 2**0 CONTENTS, READONLY
|
||||
2 NRV_TAIL 00000000 0000000000000000 0000000000000000 00000064 2**0 CONTENTS, READONLY
|
||||
3 NRV2E 00000128 0000000000000000 0000000000000000 00000064 2**2 CONTENTS, READONLY
|
||||
4 NRV2D 00000114 0000000000000000 0000000000000000 0000018c 2**2 CONTENTS, READONLY
|
||||
5 NRV2B 0000059c 0000000000000000 0000000000000000 000002a0 2**2 CONTENTS, READONLY
|
||||
6 ELFMAINY 0000003e 0000000000000000 0000000000000000 0000083c 2**2 CONTENTS, READONLY
|
||||
7 ELFMAINZ 000002ec 0000000000000000 0000000000000000 0000087c 2**2 CONTENTS, READONLY
|
||||
4 NRV2D 0000011c 0000000000000000 0000000000000000 0000018c 2**2 CONTENTS, READONLY
|
||||
5 NRV2B 000005a4 0000000000000000 0000000000000000 000002a8 2**2 CONTENTS, READONLY
|
||||
6 ELFMAINY 0000003e 0000000000000000 0000000000000000 0000084c 2**2 CONTENTS, READONLY
|
||||
7 ELFMAINZ 000002ec 0000000000000000 0000000000000000 0000088c 2**2 CONTENTS, READONLY
|
||||
SYMBOL TABLE:
|
||||
0000000000000000 l d ELFMAINZ 0000000000000000 ELFMAINZ
|
||||
0000000000000000 l d ELFMAINX 0000000000000000 ELFMAINX
|
||||
@@ -21,9 +21,9 @@ SYMBOL TABLE:
|
||||
0000000000000000 l d ELFMAINY 0000000000000000 ELFMAINY
|
||||
0000000000000000 g ELFMAINX 0000000000000000 _start
|
||||
0000000000000000 g F NRV2E 0000000000000128 ucl_nrv2e_decompress_32
|
||||
0000000000000000 g F NRV2D 0000000000000114 ucl_nrv2d_decompress_8
|
||||
0000000000000000 g F NRV2B 00000000000000e8 ucl_nrv2b_decompress_8
|
||||
00000000000000e8 g NRV2B 0000000000000000 LzmaDecode
|
||||
0000000000000000 g F NRV2D 000000000000011c ucl_nrv2d_decompress_32
|
||||
0000000000000000 g F NRV2B 00000000000000f0 ucl_nrv2b_decompress_32
|
||||
00000000000000f0 g NRV2B 0000000000000000 LzmaDecode
|
||||
0000000000000000 g ELFMAINY 0000000000000000 end_decompress
|
||||
|
||||
RELOCATION RECORDS FOR [ELFMAINX]:
|
||||
|
||||
Reference in New Issue
Block a user