Page 1 of 1

jtool -e

PostPosted: Fri Feb 24, 2017 12:03 pm
by mudley

Was just fooling around with dumping dylibs from the kernelcache.
Isn't the dsc_extractor from a better option?

jtool'ed dump of libMobileGestalt.dylib = 71M
dsc_extractor'ed dump of libMobileGestalt.dylib = 368K


Re: jtool -e

PostPosted: Fri Feb 24, 2017 6:09 pm
by morpheus
Yeah, I implemented a quick and dirty way to extract from shared cache, so I don't detach from common __LINKEDIT.

But before getting to fix that, I implemented the ":" operator so you can operate on dylibs directly in the cache, without extracting. This also does a better job than dsc_extractor, because it leaves external references intact.