Scribd
Upload
105 views2 pages

Amazing Frog

The document discusses injecting a bundle file into an application file. It provides details on the file paths being used, describes checking that the application file is a supported binary, and mentions setting the Mach-O header and injecting a payload and bundle with offsets provided.

Uploaded by

Daniel Arpasi Ortiz
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
105 views2 pages

Amazing Frog

The document discusses injecting a bundle file into an application file. It provides details on the file paths being used, describes checking that the application file is a supported binary, and mentions setting the Mach-O header and injecting a payload and bundle with offsets provided.

Uploaded by

Daniel Arpasi Ortiz
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 2

not scrambling any portion of the binary

appid 332570
debug level 2
injecting bundle
'/Users/fayju/Documents/fayju/projects/AmazingFrog/Steam_Builds/001/OSX/ContentPrep
.app/Contents/MacOS/bundle32.dylib'...into:
'/Users/fayju/Documents/fayju/SteamWorks/steamworks_sdk_131/sdk/tools/ContentBuilde
r/content/amazing_content/AmazingFrog.app/Contents/MacOS/AmazingFrog.32'
/
Users/fayju/Documents/fayju/projects/AmazingFrog/Steam_Builds/001/OSX/AmazingFrog.a
pp/Contents/MacOS/AmazingFrog appears to be a supported binary
mach-o header : 0x00000000 - 0x00000000 (0x00000000 -
0x0000001c)
load cmds : 0x00000000 - 0x00000000 (0x00000000 -
0x00001258)
Info: Couldn't find a recognized _start routine, assuming we don't need to hijack

entry point (eip): 0x0x2e60

Mach-O with compressed linkedit detected


good crypt/decrypt of bundle
good crypt/decrypt of bundle
LinkEdit segment will grow by: 0x00151ad4

__PAGEZERO : 0x00000000 - 0x00001000 (0x00000000 -


0x00000000)
__TEXT __text : 0x00002e60 - 0x00a4ce9f (0x00001e60 -
0x00a4be9f) (32)
__TEXT __symbol_stub : 0x00a4cea0 - 0x00a4e6dc (0x00a4bea0 -
0x00a4d6dc) ( 2)
__TEXT __stub_helper : 0x00a4e6dc - 0x00a50ce0 (0x00a4d6dc -
0x00a4fce0) ( 4)
__TEXT __cstring : 0x00a50ce0 - 0x00ab8d88 (0x00a4fce0 -
0x00ab7d88) (16)
__TEXT __const : 0x00ab8da0 - 0x00b01024 (0x00ab7da0 -
0x00b00024) (32)
__TEXT __ustring : 0x00b01024 - 0x00b01038 (0x00b00024 -
0x00b00038) ( 2)
__TEXT __gcc_except_tab__TEXT : 0x00b01038 - 0x00b2771c (0x00b00038 -
0x00b2671c) ( 4)
__TEXT __unwind_info : 0x00b2771c - 0x00b316e8 (0x00b2671c -
0x00b306e8) ( 1)
__TEXT __eh_frame : 0x00b316e8 - 0x00b8efe8 (0x00b306e8 -
0x00b8dfe8) ( 8)
__DATA __program_vars : 0x00b8f000 - 0x00b8f014 (0x00b8e000 -
0x00b8e014) ( 4)
__DATA __nl_symbol_ptr : 0x00b8f014 - 0x00b8fbf8 (0x00b8e014 -
0x00b8ebf8) ( 4)
__DATA __la_symbol_ptr : 0x00b8fbf8 - 0x00b90c20 (0x00b8ebf8 -
0x00b8fc20) ( 4)
__DATA __mod_init_func : 0x00b90c20 - 0x00b915d0 (0x00b8fc20 -
0x00b905d0) ( 4)
__DATA __data : 0x00b915e0 - 0x00ba6f44 (0x00b905e0 -
0x00ba5f44) (32)
__DATA __const : 0x00ba6f60 - 0x00bc6300 (0x00ba5f60 -
0x00bc5300) (32)
__DATA __cfstring : 0x00bc6300 - 0x00bc6c40 (0x00bc5300 -
0x00bc5c40) ( 4)
__DATA __common : 0x00bc6c40 - 0x00bf503c (0x00000000 -
0x0002e3fc) (32)
__DATA __bss : 0x00bf5040 - 0x00c5ca70 (0x00000000 -
0x00067a30) (32)
__OBJC __cls_refs : 0x00c5d000 - 0x00c5d090 (0x00bc6000 -
0x00bc6090) ( 4)
__OBJC __message_refs : 0x00c5d090 - 0x00c5d564 (0x00bc6090 -
0x00bc6564) ( 4)
__OBJC __class : 0x00c5d564 - 0x00c5d7d4 (0x00bc6564 -
0x00bc67d4) ( 4)
__OBJC __cat_inst_meth : 0x00c5d7d4 - 0x00c5db38 (0x00bc67d4 -
0x00bc6b38) ( 4)
__OBJC __protocol : 0x00c5db38 - 0x00c5dbc4 (0x00bc6b38 -
0x00bc6bc4) ( 4)
__OBJC __cat_cls_meth : 0x00c5dbc4 - 0x00c5dc34 (0x00bc6bc4 -
0x00bc6c34) ( 4)
__OBJC __meta_class : 0x00c5dc34 - 0x00c5dea4 (0x00bc6c34 -
0x00bc6ea4) ( 4)
__OBJC __instance_vars : 0x00c5dea4 - 0x00c5e098 (0x00bc6ea4 -
0x00bc7098) ( 4)
__OBJC __inst_meth : 0x00c5e098 - 0x00c5e554 (0x00bc7098 -
0x00bc7554) ( 4)
__OBJC __property : 0x00c5e554 - 0x00c5e574 (0x00bc7554 -
0x00bc7574) ( 4)
__OBJC __class_ext : 0x00c5e574 - 0x00c5e580 (0x00bc7574 -
0x00bc7580) ( 4)
__OBJC __symbols : 0x00c5e580 - 0x00c5e608 (0x00bc7580 -
0x00bc7608) ( 4)
__OBJC __module_info : 0x00c5e608 - 0x00c5e718 (0x00bc7608 -
0x00bc7718) ( 4)
__OBJC __cls_meth : 0x00c5e718 - 0x00c5e7a8 (0x00bc7718 -
0x00bc77a8) ( 4)
__OBJC __image_info : 0x00c5e7a8 - 0x00c5e7b0 (0x00bc77a8 -
0x00bc77b0) ( 4)
__LINKEDIT : 0x00c5f000 - 0x0128f000 (0x00bc8000 -
0x011f7a1c)

Setting Mach-O Header in Globals to: 0x1000


payload injected at address 0x0128f000 - 0x01290000, 4096 bytes
bundle attached at offset 0x11f9000 - 0x1346000, 1363968 bytes
globals injected at offset 0x13499c8 - 0x1349ad4
/
Users/fayju/Documents/fayju/projects/AmazingFrog/Steam_Builds/001/OSX/AmazingFrog.a
pp/Contents/MacOS/AmazingFrog appears to be a supported binary
Found 32 arch: Yes, 64 bit: No

ScrambleText: true

You might also like