otool -l 可执行文件结构
otool -l /Users/zzf073/Desktop/FqlMerchantX
/Users/zzf073/Desktop/FqlMerchantX:
Mach header
magic cputype cpusubtype caps filetype ncmds sizeofcmds flags
0xfeedfacf 16777228 0 0x00 2 45 5472 0x00200085
Load command 0
cmd LC_SEGMENT_64
cmdsize 72
segname __PAGEZERO
vmaddr 0x0000000000000000
vmsize 0x0000000100000000
fileoff 0
filesize 0
maxprot 0x00000000
initprot 0x00000000
nsects 0
flags 0x0
Load command 1
cmd LC_SEGMENT_64
cmdsize 952
segname __TEXT
vmaddr 0x0000000100000000
vmsize 0x00000000004cc000
fileoff 0
filesize 5029888
maxprot 0x00000005
initprot 0x00000005
nsects 11
flags 0x0
Section
sectname __text
segname __TEXT
addr 0x0000000100005700
size 0x00000000003fae50
offset 22272
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __stubs
segname __TEXT
addr 0x0000000100400550
size 0x0000000000001cec
offset 4195664
align 2^1 (2)
reloff 0
nreloc 0
flags 0x80000408
reserved1 0 (index into indirect symbol table)
reserved2 12 (size of stubs)
Section
sectname __stub_helper
segname __TEXT
addr 0x000000010040223c
size 0x0000000000001d04
offset 4203068
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __const
segname __TEXT
addr 0x0000000100403f40
size 0x0000000000009380
offset 4210496
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classname
segname __TEXT
addr 0x000000010040d2c0
size 0x0000000000004676
offset 4248256
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methname
segname __TEXT
addr 0x0000000100411936
size 0x0000000000037795
offset 4266294
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methtype
segname __TEXT
addr 0x00000001004490cb
size 0x0000000000008fb0
offset 4493515
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __cstring
segname __TEXT
addr 0x000000010045207b
size 0x000000000004598c
offset 4530299
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __gcc_except_tab
segname __TEXT
addr 0x0000000100497a08
size 0x0000000000021c18
offset 4815368
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __ustring
segname __TEXT
addr 0x00000001004b9620
size 0x0000000000007630
offset 4953632
align 2^1 (2)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __unwind_info
segname __TEXT
addr 0x00000001004c0c50
size 0x000000000000b3a4
offset 4983888
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Load command 2
cmd LC_SEGMENT_64
cmdsize 1672
segname __DATA
vmaddr 0x00000001004cc000
vmsize 0x0000000000100000
fileoff 5029888
filesize 1048576
maxprot 0x00000003
initprot 0x00000003
nsects 20
flags 0x0
Section
sectname __got
segname __DATA
addr 0x00000001004cc000
size 0x00000000000007f8
offset 5029888
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000006
reserved1 617 (index into indirect symbol table)
reserved2 0
Section
sectname __la_symbol_ptr
segname __DATA
addr 0x00000001004cc7f8
size 0x0000000000001348
offset 5031928
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000007
reserved1 872 (index into indirect symbol table)
reserved2 0
Section
sectname __mod_init_func
segname __DATA
addr 0x00000001004cdb40
size 0x0000000000000008
offset 5036864
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000009
reserved1 0
reserved2 0
Section
sectname __const
segname __DATA
addr 0x00000001004cdb50
size 0x00000000000132f0
offset 5036880
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __cfstring
segname __DATA
addr 0x00000001004e0e40
size 0x000000000001e9c0
offset 5115456
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classlist
segname __DATA
addr 0x00000001004ff800
size 0x0000000000001700
offset 5240832
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlclslist
segname __DATA
addr 0x0000000100500f00
size 0x0000000000000038
offset 5246720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_catlist
segname __DATA
addr 0x0000000100500f38
size 0x0000000000000328
offset 5246776
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlcatlist
segname __DATA
addr 0x0000000100501260
size 0x0000000000000048
offset 5247584
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_protolist
segname __DATA
addr 0x00000001005012a8
size 0x0000000000000310
offset 5247656
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_imageinfo
segname __DATA
addr 0x00000001005015b8
size 0x0000000000000008
offset 5248440
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_const
segname __DATA
addr 0x00000001005015c0
size 0x00000000000a25e0
offset 5248448
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_selrefs
segname __DATA
addr 0x00000001005a3ba0
size 0x000000000000e728
offset 5913504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000005
reserved1 0
reserved2 0
Section
sectname __objc_protorefs
segname __DATA
addr 0x00000001005b22c8
size 0x0000000000000028
offset 5972680
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classrefs
segname __DATA
addr 0x00000001005b22f0
size 0x0000000000001708
offset 5972720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_superrefs
segname __DATA
addr 0x00000001005b39f8
size 0x0000000000001080
offset 5978616
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_ivar
segname __DATA
addr 0x00000001005b4a78
size 0x0000000000003584
offset 5982840
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_data
segname __DATA
addr 0x00000001005b8000
size 0x000000000000e650
offset 5996544
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __data
segname __DATA
addr 0x00000001005c6650
size 0x0000000000002660
offset 6055504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __bss
segname __DATA
addr 0x00000001005c8cb0
size 0x0000000000000ca8
offset 0
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000001
reserved1 0
reserved2 0
Load command 3
cmd LC_SEGMENT_64
cmdsize 72
segname __LINKEDIT
vmaddr 0x00000001005cc000
vmsize 0x00000000002c8000
fileoff 6078464
filesize 2912720
maxprot 0x00000001
initprot 0x00000001
nsects 0
flags 0x0
Load command 4
cmd LC_DYLD_INFO_ONLY
cmdsize 48
rebase_off 6078464
rebase_size 25872
bind_off 6104336
bind_size 19408
weak_bind_off 0
weak_bind_size 0
lazy_bind_off 6123744
lazy_bind_size 17448
export_off 6141192
export_size 57936
Load command 5
cmd LC_SYMTAB
cmdsize 24
symoff 6225184
nsyms 63787
stroff 7251732
strsize 1616648
Load command 6
cmd LC_DYSYMTAB
cmdsize 80
ilocalsym 0
nlocalsym 60366
iextdefsym 60366
nextdefsym 2346
iundefsym 62712
nundefsym 1075
tocoff 0
ntoc 0
modtaboff 0
nmodtab 0
extrefsymoff 0
nextrefsyms 0
indirectsymoff 7245776
nindirectsyms 1489
extreloff 0
nextrel 0
locreloff 0
nlocrel 0
Load command 7
cmd LC_LOAD_DYLINKER
cmdsize 32
name /usr/lib/dyld (offset 12)
Load command 8
cmd LC_UUID
cmdsize 24
uuid 8C542E5F-8DEA-3A66-A406-1AFC89E7B94D
Load command 9
cmd LC_VERSION_MIN_IPHONEOS
cmdsize 16
version 7.1
sdk 11.2
Load command 10
cmd LC_SOURCE_VERSION
cmdsize 16
version 0.0
Load command 11
cmd LC_MAIN
cmdsize 24
entryoff 1788788
stacksize 0
Load command 12
cmd LC_ENCRYPTION_INFO_64
cmdsize 24
cryptoff 16384
cryptsize 5013504
cryptid 0
pad 0
Load command 13
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/ImageIO.framework/ImageIO (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 14
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/AssetsLibrary.framework/AssetsLibrary (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 15
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/MobileCoreServices.framework/MobileCoreServices (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 822.19.0
compatibility version 1.0.0
Load command 16
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AudioToolbox.framework/AudioToolbox (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 492.0.0
compatibility version 1.0.0
Load command 17
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Accelerate.framework/Accelerate (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 4.0.0
compatibility version 1.0.0
Load command 18
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/CoreText.framework/CoreText (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 19
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 604.4.7
compatibility version 1.0.0
Load command 20
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreBluetooth.framework/CoreBluetooth (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 21
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreLocation.framework/CoreLocation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2237.0.22
compatibility version 1.0.0
Load command 22
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AVFoundation.framework/AVFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2.0.0
compatibility version 1.0.0
Load command 23
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreTelephony.framework/CoreTelephony (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 24
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/SystemConfiguration.framework/SystemConfiguration (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 963.30.1
compatibility version 1.0.0
Load command 25
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/Security.framework/Security (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 58286.32.2
compatibility version 1.0.0
Load command 26
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libsqlite3.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 274.6.0
compatibility version 9.0.0
Load command 27
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libz.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.2.11
compatibility version 1.0.0
Load command 28
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libc++.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 400.9.1
compatibility version 1.0.0
Load command 29
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Foundation.framework/Foundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 300.0.0
Load command 30
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libobjc.A.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 228.0.0
compatibility version 1.0.0
Load command 31
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libSystem.B.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1252.0.0
compatibility version 1.0.0
Load command 32
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CFNetwork.framework/CFNetwork (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 893.14.0
compatibility version 1.0.0
Load command 33
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 150.0.0
Load command 34
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreGraphics.framework/CoreGraphics (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1129.2.1
compatibility version 64.0.0
Load command 35
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreImage.framework/CoreImage (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 5.0.0
compatibility version 1.0.0
Load command 36
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/MapKit.framework/MapKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 14.0.0
compatibility version 1.0.0
Load command 37
cmd LC_LOAD_WEAK_DYLIB
cmdsize 80
name /System/Library/Frameworks/Photos.framework/Photos (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 38
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/QuartzCore.framework/QuartzCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.11.0
compatibility version 1.2.0
Load command 39
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/UIKit.framework/UIKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 3698.33.6
compatibility version 1.0.0
Load command 40
cmd LC_LOAD_WEAK_DYLIB
cmdsize 104
name /System/Library/Frameworks/UserNotifications.framework/UserNotifications (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 41
cmd LC_RPATH
cmdsize 40
path @executable_path/Frameworks (offset 12)
Load command 42
cmd LC_FUNCTION_STARTS
cmdsize 16
dataoff 6199128
datasize 25832
Load command 43
cmd LC_DATA_IN_CODE
cmdsize 16
dataoff 6224960
datasize 224
Load command 44
cmd LC_CODE_SIGNATURE
cmdsize 16
dataoff 8868384
datasize 122800
otool -l 可执行文件结构的更多相关文章
- iOS逆向+越狱
感觉本文涉及内容有点多的,但是自己不愿意写太多,就简单的谢谢关于ios上手的东西吧 初级入手不免要用到,pp助手,i4 tools等 iOS逆向-ipa包重签名及非越狱手机安装多个应用 1.常识 我们 ...
- iOS逆向系列-Mach-O文件
概述 Mach-O是Mach object的缩写,是Mac\iOS上用于存储程序.库的标准格式. 常见的Mach-O文件 属于Mach-O格式的文件类型有. 可以在xnu源码中,查看到Mach-O格式 ...
- iOS逆向系列-脱壳
概述 通过iOS逆向系列-逆向App中使用class-dump工具导出App的Mach-O文件所有头文件.Hopper工具分析App的Mach-O文件代码大概实现.但是这些前体是App的Mach-O没 ...
- otool介绍（转http://www.mc2lab.com/?p=68）
1. Otool简介 Otool可以提取并显示ios下目标文件的相关信息,包括头部,加载命令,各个段,共享库,动态库等等.它拥有大量的命令选项,是一个功能强大的分析工具,当然还可以做反汇编的工具使用. ...
- 了解iOS上的可执行文件和Mach-O格式
http://www.cocoachina.com/mac/20150122/10988.html http://www.reinterpretcast.com/hello-world-mach-o ...
- 手写PE结构解析工具
PE格式是 Windows下最常用的可执行文件格式,理解PE文件格式不仅可以了解操作系统的加载流程,还可以更好的理解操作系统对进程和内存相关的管理知识,而有些技术必须建立在了解PE文件格式的基础上,如 ...
- SqList *L 和 SqList * &L的区别/学习数据结构突然发现不太懂 小祥我查找总结了一下
小祥在学习李春葆的数据结构教程时发现一个小问题,建立顺序表和输出线性表,这两个函数的形参是不一样的. 代码在这里↓↓↓ //定义顺序表L的结构体 typedef struct { Elemtype d ...
- otool
一.简介 二.实例 1)查看动态链接库 otool -L /usr/bin/vim
- PHP 语言结构（Language constructs）和函数的区别
相信大家经常看到对比一些PHP应用中,说用isset() 替换 strlen(),isset比strlen执行速度快等. 例子: if ( isset($username[5]) ) { // The ...
随机推荐
- [kuangbin带你飞]专题1-23题目清单总结
[kuangbin带你飞]专题1-23 专题一 简单搜索 POJ 1321 棋盘问题POJ 2251 Dungeon MasterPOJ 3278 Catch That CowPOJ 3279 Fli ...
- Java 实现线程安全的三种方式
一个程序在运行起来的时候会转换成进程,通常含有多个线程. 通常情况下,一个进程中的比较耗时的操作(如长循环.文件上传下载.网络资源获取等),往往会采用多线程来解决. 比如显示生活中,银行取钱问题.火车 ...
- Laravel 5
遍历数组@foreach($brand as $v) <a href='/brandss/seeshops?id={{$v->id}}'><img src="/pub ...
- java陷阱之spring事物管理导致锁无效
模拟锁情况无效 1.创建一个表 SET NAMES utf8mb4; ; DROP TABLE IF EXISTS `demo`; CREATE TABLE `demo` ( `id` ) NOT N ...
- HDU4572 Bottles Arrangement
/* HDU4572 Bottles Arrangement http://acm.hdu.edu.cn/showproblem.php?pid=4572 数论 找规律 题意:有m行n列和1-n的数各 ...
- HDU - 2923 - Einbahnstrasse
题目: Einbahnstrasse Time Limit: 2000/1000 MS (Java/Others) Memory Limit: 32768/32768 K (Java/Other ...
- 关于IFeatureSelection的SelectFeatures方法
近期做项目时用到IFeatureLayer as IFeatureSelection,然后使用IFeatureSelection.SelectFeatures方法.可是得到的IFeatureSelec ...
- luogu3942 将军令 贪心
题目大意:给你一个地图(树),共有1~n个驿站(点),编号分别为1~n,告诉你第ui个驿站与第vi个驿站有一条长度为1的路(边),每个小队(可以放在任意驿站上)最多有k的覆盖长度,问最多要放置多少个小 ...
- oc18--self1
// // Iphone.h // day13 #import <Foundation/Foundation.h> typedef enum { kFlahlightStatusOpen, ...
- 利用“反射”动态加载R文件中的资源
前几天做一个Android下面数据库相关的应用.用ListVIew展示表中数据的时候我希望能给表中每一条记录,加一个展示的图片.但是用数据库保存图片是比较难搞的.于是就把所需图片都保存到res下的dr ...