otool -l 可执行文件结构
otool -l /Users/zzf073/Desktop/FqlMerchantX
/Users/zzf073/Desktop/FqlMerchantX:
Mach header
magic cputype cpusubtype caps filetype ncmds sizeofcmds flags
0xfeedfacf 16777228 0 0x00 2 45 5472 0x00200085
Load command 0
cmd LC_SEGMENT_64
cmdsize 72
segname __PAGEZERO
vmaddr 0x0000000000000000
vmsize 0x0000000100000000
fileoff 0
filesize 0
maxprot 0x00000000
initprot 0x00000000
nsects 0
flags 0x0
Load command 1
cmd LC_SEGMENT_64
cmdsize 952
segname __TEXT
vmaddr 0x0000000100000000
vmsize 0x00000000004cc000
fileoff 0
filesize 5029888
maxprot 0x00000005
initprot 0x00000005
nsects 11
flags 0x0
Section
sectname __text
segname __TEXT
addr 0x0000000100005700
size 0x00000000003fae50
offset 22272
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __stubs
segname __TEXT
addr 0x0000000100400550
size 0x0000000000001cec
offset 4195664
align 2^1 (2)
reloff 0
nreloc 0
flags 0x80000408
reserved1 0 (index into indirect symbol table)
reserved2 12 (size of stubs)
Section
sectname __stub_helper
segname __TEXT
addr 0x000000010040223c
size 0x0000000000001d04
offset 4203068
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __const
segname __TEXT
addr 0x0000000100403f40
size 0x0000000000009380
offset 4210496
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classname
segname __TEXT
addr 0x000000010040d2c0
size 0x0000000000004676
offset 4248256
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methname
segname __TEXT
addr 0x0000000100411936
size 0x0000000000037795
offset 4266294
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methtype
segname __TEXT
addr 0x00000001004490cb
size 0x0000000000008fb0
offset 4493515
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __cstring
segname __TEXT
addr 0x000000010045207b
size 0x000000000004598c
offset 4530299
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __gcc_except_tab
segname __TEXT
addr 0x0000000100497a08
size 0x0000000000021c18
offset 4815368
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __ustring
segname __TEXT
addr 0x00000001004b9620
size 0x0000000000007630
offset 4953632
align 2^1 (2)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __unwind_info
segname __TEXT
addr 0x00000001004c0c50
size 0x000000000000b3a4
offset 4983888
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Load command 2
cmd LC_SEGMENT_64
cmdsize 1672
segname __DATA
vmaddr 0x00000001004cc000
vmsize 0x0000000000100000
fileoff 5029888
filesize 1048576
maxprot 0x00000003
initprot 0x00000003
nsects 20
flags 0x0
Section
sectname __got
segname __DATA
addr 0x00000001004cc000
size 0x00000000000007f8
offset 5029888
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000006
reserved1 617 (index into indirect symbol table)
reserved2 0
Section
sectname __la_symbol_ptr
segname __DATA
addr 0x00000001004cc7f8
size 0x0000000000001348
offset 5031928
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000007
reserved1 872 (index into indirect symbol table)
reserved2 0
Section
sectname __mod_init_func
segname __DATA
addr 0x00000001004cdb40
size 0x0000000000000008
offset 5036864
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000009
reserved1 0
reserved2 0
Section
sectname __const
segname __DATA
addr 0x00000001004cdb50
size 0x00000000000132f0
offset 5036880
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __cfstring
segname __DATA
addr 0x00000001004e0e40
size 0x000000000001e9c0
offset 5115456
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classlist
segname __DATA
addr 0x00000001004ff800
size 0x0000000000001700
offset 5240832
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlclslist
segname __DATA
addr 0x0000000100500f00
size 0x0000000000000038
offset 5246720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_catlist
segname __DATA
addr 0x0000000100500f38
size 0x0000000000000328
offset 5246776
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlcatlist
segname __DATA
addr 0x0000000100501260
size 0x0000000000000048
offset 5247584
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_protolist
segname __DATA
addr 0x00000001005012a8
size 0x0000000000000310
offset 5247656
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_imageinfo
segname __DATA
addr 0x00000001005015b8
size 0x0000000000000008
offset 5248440
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_const
segname __DATA
addr 0x00000001005015c0
size 0x00000000000a25e0
offset 5248448
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_selrefs
segname __DATA
addr 0x00000001005a3ba0
size 0x000000000000e728
offset 5913504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000005
reserved1 0
reserved2 0
Section
sectname __objc_protorefs
segname __DATA
addr 0x00000001005b22c8
size 0x0000000000000028
offset 5972680
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classrefs
segname __DATA
addr 0x00000001005b22f0
size 0x0000000000001708
offset 5972720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_superrefs
segname __DATA
addr 0x00000001005b39f8
size 0x0000000000001080
offset 5978616
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_ivar
segname __DATA
addr 0x00000001005b4a78
size 0x0000000000003584
offset 5982840
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_data
segname __DATA
addr 0x00000001005b8000
size 0x000000000000e650
offset 5996544
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __data
segname __DATA
addr 0x00000001005c6650
size 0x0000000000002660
offset 6055504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __bss
segname __DATA
addr 0x00000001005c8cb0
size 0x0000000000000ca8
offset 0
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000001
reserved1 0
reserved2 0
Load command 3
cmd LC_SEGMENT_64
cmdsize 72
segname __LINKEDIT
vmaddr 0x00000001005cc000
vmsize 0x00000000002c8000
fileoff 6078464
filesize 2912720
maxprot 0x00000001
initprot 0x00000001
nsects 0
flags 0x0
Load command 4
cmd LC_DYLD_INFO_ONLY
cmdsize 48
rebase_off 6078464
rebase_size 25872
bind_off 6104336
bind_size 19408
weak_bind_off 0
weak_bind_size 0
lazy_bind_off 6123744
lazy_bind_size 17448
export_off 6141192
export_size 57936
Load command 5
cmd LC_SYMTAB
cmdsize 24
symoff 6225184
nsyms 63787
stroff 7251732
strsize 1616648
Load command 6
cmd LC_DYSYMTAB
cmdsize 80
ilocalsym 0
nlocalsym 60366
iextdefsym 60366
nextdefsym 2346
iundefsym 62712
nundefsym 1075
tocoff 0
ntoc 0
modtaboff 0
nmodtab 0
extrefsymoff 0
nextrefsyms 0
indirectsymoff 7245776
nindirectsyms 1489
extreloff 0
nextrel 0
locreloff 0
nlocrel 0
Load command 7
cmd LC_LOAD_DYLINKER
cmdsize 32
name /usr/lib/dyld (offset 12)
Load command 8
cmd LC_UUID
cmdsize 24
uuid 8C542E5F-8DEA-3A66-A406-1AFC89E7B94D
Load command 9
cmd LC_VERSION_MIN_IPHONEOS
cmdsize 16
version 7.1
sdk 11.2
Load command 10
cmd LC_SOURCE_VERSION
cmdsize 16
version 0.0
Load command 11
cmd LC_MAIN
cmdsize 24
entryoff 1788788
stacksize 0
Load command 12
cmd LC_ENCRYPTION_INFO_64
cmdsize 24
cryptoff 16384
cryptsize 5013504
cryptid 0
pad 0
Load command 13
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/ImageIO.framework/ImageIO (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 14
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/AssetsLibrary.framework/AssetsLibrary (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 15
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/MobileCoreServices.framework/MobileCoreServices (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 822.19.0
compatibility version 1.0.0
Load command 16
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AudioToolbox.framework/AudioToolbox (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 492.0.0
compatibility version 1.0.0
Load command 17
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Accelerate.framework/Accelerate (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 4.0.0
compatibility version 1.0.0
Load command 18
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/CoreText.framework/CoreText (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 19
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 604.4.7
compatibility version 1.0.0
Load command 20
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreBluetooth.framework/CoreBluetooth (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 21
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreLocation.framework/CoreLocation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2237.0.22
compatibility version 1.0.0
Load command 22
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AVFoundation.framework/AVFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2.0.0
compatibility version 1.0.0
Load command 23
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreTelephony.framework/CoreTelephony (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 24
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/SystemConfiguration.framework/SystemConfiguration (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 963.30.1
compatibility version 1.0.0
Load command 25
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/Security.framework/Security (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 58286.32.2
compatibility version 1.0.0
Load command 26
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libsqlite3.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 274.6.0
compatibility version 9.0.0
Load command 27
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libz.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.2.11
compatibility version 1.0.0
Load command 28
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libc++.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 400.9.1
compatibility version 1.0.0
Load command 29
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Foundation.framework/Foundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 300.0.0
Load command 30
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libobjc.A.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 228.0.0
compatibility version 1.0.0
Load command 31
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libSystem.B.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1252.0.0
compatibility version 1.0.0
Load command 32
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CFNetwork.framework/CFNetwork (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 893.14.0
compatibility version 1.0.0
Load command 33
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 150.0.0
Load command 34
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreGraphics.framework/CoreGraphics (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1129.2.1
compatibility version 64.0.0
Load command 35
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreImage.framework/CoreImage (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 5.0.0
compatibility version 1.0.0
Load command 36
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/MapKit.framework/MapKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 14.0.0
compatibility version 1.0.0
Load command 37
cmd LC_LOAD_WEAK_DYLIB
cmdsize 80
name /System/Library/Frameworks/Photos.framework/Photos (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 38
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/QuartzCore.framework/QuartzCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.11.0
compatibility version 1.2.0
Load command 39
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/UIKit.framework/UIKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 3698.33.6
compatibility version 1.0.0
Load command 40
cmd LC_LOAD_WEAK_DYLIB
cmdsize 104
name /System/Library/Frameworks/UserNotifications.framework/UserNotifications (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 41
cmd LC_RPATH
cmdsize 40
path @executable_path/Frameworks (offset 12)
Load command 42
cmd LC_FUNCTION_STARTS
cmdsize 16
dataoff 6199128
datasize 25832
Load command 43
cmd LC_DATA_IN_CODE
cmdsize 16
dataoff 6224960
datasize 224
Load command 44
cmd LC_CODE_SIGNATURE
cmdsize 16
dataoff 8868384
datasize 122800
otool -l 可执行文件结构的更多相关文章
- iOS逆向+越狱
感觉本文涉及内容有点多的,但是自己不愿意写太多,就简单的谢谢关于ios上手的东西吧 初级入手不免要用到,pp助手,i4 tools等 iOS逆向-ipa包重签名及非越狱手机安装多个应用 1.常识 我们 ...
- iOS逆向系列-Mach-O文件
概述 Mach-O是Mach object的缩写,是Mac\iOS上用于存储程序.库的标准格式. 常见的Mach-O文件 属于Mach-O格式的文件类型有. 可以在xnu源码中,查看到Mach-O格式 ...
- iOS逆向系列-脱壳
概述 通过iOS逆向系列-逆向App中使用class-dump工具导出App的Mach-O文件所有头文件.Hopper工具分析App的Mach-O文件代码大概实现.但是这些前体是App的Mach-O没 ...
- otool介绍（转http://www.mc2lab.com/?p=68）
1. Otool简介 Otool可以提取并显示ios下目标文件的相关信息,包括头部,加载命令,各个段,共享库,动态库等等.它拥有大量的命令选项,是一个功能强大的分析工具,当然还可以做反汇编的工具使用. ...
- 了解iOS上的可执行文件和Mach-O格式
http://www.cocoachina.com/mac/20150122/10988.html http://www.reinterpretcast.com/hello-world-mach-o ...
- 手写PE结构解析工具
PE格式是 Windows下最常用的可执行文件格式,理解PE文件格式不仅可以了解操作系统的加载流程,还可以更好的理解操作系统对进程和内存相关的管理知识,而有些技术必须建立在了解PE文件格式的基础上,如 ...
- SqList *L 和 SqList * &L的区别/学习数据结构突然发现不太懂 小祥我查找总结了一下
小祥在学习李春葆的数据结构教程时发现一个小问题,建立顺序表和输出线性表,这两个函数的形参是不一样的. 代码在这里↓↓↓ //定义顺序表L的结构体 typedef struct { Elemtype d ...
- otool
一.简介 二.实例 1)查看动态链接库 otool -L /usr/bin/vim
- PHP 语言结构（Language constructs）和函数的区别
相信大家经常看到对比一些PHP应用中,说用isset() 替换 strlen(),isset比strlen执行速度快等. 例子: if ( isset($username[5]) ) { // The ...
随机推荐
- JDK环境变量设置（linux）
1.下载jdk1.8版本软件包 2.解压 tar -zxvf jdk1.8.tar.gz mv jdk1.8 /usr/local/ 3.添加环境变量 vim /etc/profile 在文件底部加入 ...
- qsort快速排序
C库函数qsort七种使用方法示例 七种qsort排序方法<本文中排序都是采用的从小到大排序> 一.对int类型数组排序C++ / C 代码 int num[100]; Sample: i ...
- Hadoop版本：CDH, HDP, MapR
Hadoop版本:CDH, HDP, MapR 学习了:http://dongxicheng.org/mapreduce-nextgen/hadoop-distribution-selection/ ...
- 初探BurpSuite
BurpSuite这套渗透软件.或者已经能够说是渗透攻击平台了吧,玩的好.确实非常方便. 就像是玩英雄联盟的ADC,一開始玩VN.感觉非常难上手,玩多了肯定会爱上VN(啊,貌似提到了什么奇怪的东西). ...
- WPF带cookie get/post请求网页,下载文件,图片,可保持会话状态
直接写成啦一个MyNet.cs类方便使用 get/post方法请求 //get请求 MyNet.SendRequest("http://www.baidu.com"); //pos ...
- Palindrome Linked List 234
推断是否为回文链栈 时间复杂度为O(n) 空间复杂度为O(1) : 运用递归 保证空间复杂度为O(1): 时间复杂度为O(n): 注意定义了一个全局变量 flag = true 用此标记来标记是否在推 ...
- MyBatis中sqlSession操作数据库，不报错但无法实现数据修改（增、改、删）
public void addCustomerTest() throws Exception { SqlSession sqlSession = MyBatisUtils.getSession(); ...
- 消息推送之百度云推送Android集成与用法
这两天因为项目须要.研究了一下百度云推送,本来这事没什么多大工作量的,但注冊百度开发人员账户创建应用令我蛋疼菊紧了好一阵,这些东西做了对技术没啥提升,不做又不行,必经之路. 好在我耗费了N多个毫毫秒秒 ...
- POJ2689 Prime Distance 质数筛选
题目大意 求区间[L, R]中距离最大和最小的两对相邻质数.R<2^31, R-L<1e6. 总体思路 本题数据很大.求sqrt(R)的所有质数,用这些质数乘以j, j+1, j+2... ...
- SpringBoot之表单验证@Valid
转自:https://www.cnblogs.com/chenlove/p/8708627.html SpringBoot提供了强大的表单验证功能实现,给我们省去了写验证的麻烦: 这里我们给下实例,提 ...