1

I have an unsupported file format from an OS X program. It uses NSDocument, unfortunately the vendor won't help with the format - or allow export.

So what are the first steps in reverse engineering this format based on NSDocument? The program still uses deprecated initWithContentsOfFile methods from os x 10.3. I have access to the program, my data and lots of sample data.

I've done some initial work on disassembly of the program, and revese engineering the format. But haven't made much progress. The disassembly hasn't revealed a thing, but looking at the file with a hex editor has given me the outline of a few o the data structures and the initial fixed header.

8
  • If you have the program, why can't you just look at how it reads the file?
    – jtbandes
    Aug 15, 2011 at 20:25
  • @jtbandes It sounds like he has access to the compiled program, not the source code. Aug 15, 2011 at 20:33
  • Then I'm wondering how he knows it uses initWithContentsOfFile.
    – jtbandes
    Aug 15, 2011 at 20:34
  • @jtbandes: I'm guessing the framework is probably logging deprecation warnings.
    – Chuck
    Aug 15, 2011 at 21:08
  • I've disassembled bits of the code with gdb which shows it. Also, an nm disassembly lists initWithContentsOfFile:ofType: as one of the methods in the program. I don't have the source, but the binary is not stripped.
    – james
    Aug 15, 2011 at 21:11

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.