In this video, we'll be looking into a command known as dumplings.
Dumplings is a command which is provided by a package utils.
Okay, so dumplings is user space utility, which is to dump all of the internal Elf structures into
the equivalent C structures.
So if I want to see, uh, the all Elf structures in this into a C format, I can use dump elf.
So now suppose I will run this dump elf into the user space code, and it will print me within a C format.
Okay, now if you see this code has starting from this one, uh, it is saying, uh, this has an Elf
header and it has a 13 program headers, 31 section headers and some dynamic headers.
And it has information about Elf header ident, what type of identities okay.
It is giving that it has this magic number.
And this is the C flags.
It was used data etc. and type of the Elf header.
It is machine version.
All those Elf is present in the C structure format.
And then it has a program headers, all the program headers.
It is printing.
Whatever it has.
We will be seeing program headers later.
But now comes the section header.
So as section headers has name, name is just an offset in the section header string table it has section
header type.
What is the type of the section header flags, section header address and the offset offset in the file?
What is the size of the section header and if it is linking to any section header info?
All those all the section header in the string format is being printed.
So we have all the different section headers plt and all the text section.
The text section size is like almost a 36 byte, uh, and is present at this particular location in
the file Elf file.
Other data is present at this particular location, so I can verify that.
So if I say hexdump hyphens s s uh s what is skip to this particular location.
Uh, it is as small as say x temp hyphen S8192.
And this user space I'll just say head and I'll give I have capital C.
So this is some section.
So stat is used.
Some information is presented this 8192 bytes which is given by the arrow data section.
So raw data.
Is present here.
8192 bytes.
After this you have some other sections like frame header, so that the important point is, uh, if
you want to see your whole structure in a C structure format, I can use a dump elf tool.