05:58 <kyak> ugh. The compiler has scattered data all over the file (it's .so library) instead of putting it into contiguous region. This actually used to be an XPM image (i.e. array of strings). During execution, everything is put back together - i.e. I can observe an array of strings with individual strings pointing to all over the place. What is the mechanism that does that?

05:59 <kyak> I'm actually interesting in pulling this XPM image from .so without running that .so. I kinda achieve what i want when running it in debugger with breakpoints

06:00 <kyak> strangely, when i compile .so myself, i see that XPM data is put into contiguous region of file. So I can easily pull it back. It must be some compiler optimizations or stripping, i guess

06:41 <kyak> i think i get it.. the mechanism is called relocation and readelf gives me them required addresses