otool -l 可执行文件结构
otool -l /Users/zzf073/Desktop/FqlMerchantX
/Users/zzf073/Desktop/FqlMerchantX:
Mach header
magic cputype cpusubtype caps filetype ncmds sizeofcmds flags
0xfeedfacf 16777228 0 0x00 2 45 5472 0x00200085
Load command 0
cmd LC_SEGMENT_64
cmdsize 72
segname __PAGEZERO
vmaddr 0x0000000000000000
vmsize 0x0000000100000000
fileoff 0
filesize 0
maxprot 0x00000000
initprot 0x00000000
nsects 0
flags 0x0
Load command 1
cmd LC_SEGMENT_64
cmdsize 952
segname __TEXT
vmaddr 0x0000000100000000
vmsize 0x00000000004cc000
fileoff 0
filesize 5029888
maxprot 0x00000005
initprot 0x00000005
nsects 11
flags 0x0
Section
sectname __text
segname __TEXT
addr 0x0000000100005700
size 0x00000000003fae50
offset 22272
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __stubs
segname __TEXT
addr 0x0000000100400550
size 0x0000000000001cec
offset 4195664
align 2^1 (2)
reloff 0
nreloc 0
flags 0x80000408
reserved1 0 (index into indirect symbol table)
reserved2 12 (size of stubs)
Section
sectname __stub_helper
segname __TEXT
addr 0x000000010040223c
size 0x0000000000001d04
offset 4203068
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __const
segname __TEXT
addr 0x0000000100403f40
size 0x0000000000009380
offset 4210496
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classname
segname __TEXT
addr 0x000000010040d2c0
size 0x0000000000004676
offset 4248256
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methname
segname __TEXT
addr 0x0000000100411936
size 0x0000000000037795
offset 4266294
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methtype
segname __TEXT
addr 0x00000001004490cb
size 0x0000000000008fb0
offset 4493515
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __cstring
segname __TEXT
addr 0x000000010045207b
size 0x000000000004598c
offset 4530299
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __gcc_except_tab
segname __TEXT
addr 0x0000000100497a08
size 0x0000000000021c18
offset 4815368
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __ustring
segname __TEXT
addr 0x00000001004b9620
size 0x0000000000007630
offset 4953632
align 2^1 (2)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __unwind_info
segname __TEXT
addr 0x00000001004c0c50
size 0x000000000000b3a4
offset 4983888
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Load command 2
cmd LC_SEGMENT_64
cmdsize 1672
segname __DATA
vmaddr 0x00000001004cc000
vmsize 0x0000000000100000
fileoff 5029888
filesize 1048576
maxprot 0x00000003
initprot 0x00000003
nsects 20
flags 0x0
Section
sectname __got
segname __DATA
addr 0x00000001004cc000
size 0x00000000000007f8
offset 5029888
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000006
reserved1 617 (index into indirect symbol table)
reserved2 0
Section
sectname __la_symbol_ptr
segname __DATA
addr 0x00000001004cc7f8
size 0x0000000000001348
offset 5031928
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000007
reserved1 872 (index into indirect symbol table)
reserved2 0
Section
sectname __mod_init_func
segname __DATA
addr 0x00000001004cdb40
size 0x0000000000000008
offset 5036864
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000009
reserved1 0
reserved2 0
Section
sectname __const
segname __DATA
addr 0x00000001004cdb50
size 0x00000000000132f0
offset 5036880
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __cfstring
segname __DATA
addr 0x00000001004e0e40
size 0x000000000001e9c0
offset 5115456
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classlist
segname __DATA
addr 0x00000001004ff800
size 0x0000000000001700
offset 5240832
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlclslist
segname __DATA
addr 0x0000000100500f00
size 0x0000000000000038
offset 5246720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_catlist
segname __DATA
addr 0x0000000100500f38
size 0x0000000000000328
offset 5246776
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlcatlist
segname __DATA
addr 0x0000000100501260
size 0x0000000000000048
offset 5247584
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_protolist
segname __DATA
addr 0x00000001005012a8
size 0x0000000000000310
offset 5247656
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_imageinfo
segname __DATA
addr 0x00000001005015b8
size 0x0000000000000008
offset 5248440
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_const
segname __DATA
addr 0x00000001005015c0
size 0x00000000000a25e0
offset 5248448
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_selrefs
segname __DATA
addr 0x00000001005a3ba0
size 0x000000000000e728
offset 5913504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000005
reserved1 0
reserved2 0
Section
sectname __objc_protorefs
segname __DATA
addr 0x00000001005b22c8
size 0x0000000000000028
offset 5972680
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classrefs
segname __DATA
addr 0x00000001005b22f0
size 0x0000000000001708
offset 5972720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_superrefs
segname __DATA
addr 0x00000001005b39f8
size 0x0000000000001080
offset 5978616
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_ivar
segname __DATA
addr 0x00000001005b4a78
size 0x0000000000003584
offset 5982840
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_data
segname __DATA
addr 0x00000001005b8000
size 0x000000000000e650
offset 5996544
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __data
segname __DATA
addr 0x00000001005c6650
size 0x0000000000002660
offset 6055504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __bss
segname __DATA
addr 0x00000001005c8cb0
size 0x0000000000000ca8
offset 0
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000001
reserved1 0
reserved2 0
Load command 3
cmd LC_SEGMENT_64
cmdsize 72
segname __LINKEDIT
vmaddr 0x00000001005cc000
vmsize 0x00000000002c8000
fileoff 6078464
filesize 2912720
maxprot 0x00000001
initprot 0x00000001
nsects 0
flags 0x0
Load command 4
cmd LC_DYLD_INFO_ONLY
cmdsize 48
rebase_off 6078464
rebase_size 25872
bind_off 6104336
bind_size 19408
weak_bind_off 0
weak_bind_size 0
lazy_bind_off 6123744
lazy_bind_size 17448
export_off 6141192
export_size 57936
Load command 5
cmd LC_SYMTAB
cmdsize 24
symoff 6225184
nsyms 63787
stroff 7251732
strsize 1616648
Load command 6
cmd LC_DYSYMTAB
cmdsize 80
ilocalsym 0
nlocalsym 60366
iextdefsym 60366
nextdefsym 2346
iundefsym 62712
nundefsym 1075
tocoff 0
ntoc 0
modtaboff 0
nmodtab 0
extrefsymoff 0
nextrefsyms 0
indirectsymoff 7245776
nindirectsyms 1489
extreloff 0
nextrel 0
locreloff 0
nlocrel 0
Load command 7
cmd LC_LOAD_DYLINKER
cmdsize 32
name /usr/lib/dyld (offset 12)
Load command 8
cmd LC_UUID
cmdsize 24
uuid 8C542E5F-8DEA-3A66-A406-1AFC89E7B94D
Load command 9
cmd LC_VERSION_MIN_IPHONEOS
cmdsize 16
version 7.1
sdk 11.2
Load command 10
cmd LC_SOURCE_VERSION
cmdsize 16
version 0.0
Load command 11
cmd LC_MAIN
cmdsize 24
entryoff 1788788
stacksize 0
Load command 12
cmd LC_ENCRYPTION_INFO_64
cmdsize 24
cryptoff 16384
cryptsize 5013504
cryptid 0
pad 0
Load command 13
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/ImageIO.framework/ImageIO (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 14
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/AssetsLibrary.framework/AssetsLibrary (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 15
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/MobileCoreServices.framework/MobileCoreServices (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 822.19.0
compatibility version 1.0.0
Load command 16
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AudioToolbox.framework/AudioToolbox (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 492.0.0
compatibility version 1.0.0
Load command 17
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Accelerate.framework/Accelerate (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 4.0.0
compatibility version 1.0.0
Load command 18
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/CoreText.framework/CoreText (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 19
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 604.4.7
compatibility version 1.0.0
Load command 20
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreBluetooth.framework/CoreBluetooth (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 21
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreLocation.framework/CoreLocation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2237.0.22
compatibility version 1.0.0
Load command 22
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AVFoundation.framework/AVFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2.0.0
compatibility version 1.0.0
Load command 23
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreTelephony.framework/CoreTelephony (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 24
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/SystemConfiguration.framework/SystemConfiguration (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 963.30.1
compatibility version 1.0.0
Load command 25
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/Security.framework/Security (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 58286.32.2
compatibility version 1.0.0
Load command 26
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libsqlite3.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 274.6.0
compatibility version 9.0.0
Load command 27
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libz.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.2.11
compatibility version 1.0.0
Load command 28
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libc++.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 400.9.1
compatibility version 1.0.0
Load command 29
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Foundation.framework/Foundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 300.0.0
Load command 30
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libobjc.A.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 228.0.0
compatibility version 1.0.0
Load command 31
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libSystem.B.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1252.0.0
compatibility version 1.0.0
Load command 32
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CFNetwork.framework/CFNetwork (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 893.14.0
compatibility version 1.0.0
Load command 33
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 150.0.0
Load command 34
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreGraphics.framework/CoreGraphics (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1129.2.1
compatibility version 64.0.0
Load command 35
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreImage.framework/CoreImage (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 5.0.0
compatibility version 1.0.0
Load command 36
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/MapKit.framework/MapKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 14.0.0
compatibility version 1.0.0
Load command 37
cmd LC_LOAD_WEAK_DYLIB
cmdsize 80
name /System/Library/Frameworks/Photos.framework/Photos (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 38
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/QuartzCore.framework/QuartzCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.11.0
compatibility version 1.2.0
Load command 39
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/UIKit.framework/UIKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 3698.33.6
compatibility version 1.0.0
Load command 40
cmd LC_LOAD_WEAK_DYLIB
cmdsize 104
name /System/Library/Frameworks/UserNotifications.framework/UserNotifications (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 41
cmd LC_RPATH
cmdsize 40
path @executable_path/Frameworks (offset 12)
Load command 42
cmd LC_FUNCTION_STARTS
cmdsize 16
dataoff 6199128
datasize 25832
Load command 43
cmd LC_DATA_IN_CODE
cmdsize 16
dataoff 6224960
datasize 224
Load command 44
cmd LC_CODE_SIGNATURE
cmdsize 16
dataoff 8868384
datasize 122800
otool -l 可执行文件结构的更多相关文章
- iOS逆向+越狱
感觉本文涉及内容有点多的,但是自己不愿意写太多,就简单的谢谢关于ios上手的东西吧 初级入手不免要用到,pp助手,i4 tools等 iOS逆向-ipa包重签名及非越狱手机安装多个应用 1.常识 我们 ...
- iOS逆向系列-Mach-O文件
概述 Mach-O是Mach object的缩写,是Mac\iOS上用于存储程序.库的标准格式. 常见的Mach-O文件 属于Mach-O格式的文件类型有. 可以在xnu源码中,查看到Mach-O格式 ...
- iOS逆向系列-脱壳
概述 通过iOS逆向系列-逆向App中使用class-dump工具导出App的Mach-O文件所有头文件.Hopper工具分析App的Mach-O文件代码大概实现.但是这些前体是App的Mach-O没 ...
- otool介绍（转http://www.mc2lab.com/?p=68）
1. Otool简介 Otool可以提取并显示ios下目标文件的相关信息,包括头部,加载命令,各个段,共享库,动态库等等.它拥有大量的命令选项,是一个功能强大的分析工具,当然还可以做反汇编的工具使用. ...
- 了解iOS上的可执行文件和Mach-O格式
http://www.cocoachina.com/mac/20150122/10988.html http://www.reinterpretcast.com/hello-world-mach-o ...
- 手写PE结构解析工具
PE格式是 Windows下最常用的可执行文件格式,理解PE文件格式不仅可以了解操作系统的加载流程,还可以更好的理解操作系统对进程和内存相关的管理知识,而有些技术必须建立在了解PE文件格式的基础上,如 ...
- SqList *L 和 SqList * &L的区别/学习数据结构突然发现不太懂 小祥我查找总结了一下
小祥在学习李春葆的数据结构教程时发现一个小问题,建立顺序表和输出线性表,这两个函数的形参是不一样的. 代码在这里↓↓↓ //定义顺序表L的结构体 typedef struct { Elemtype d ...
- otool
一.简介 二.实例 1)查看动态链接库 otool -L /usr/bin/vim
- PHP 语言结构（Language constructs）和函数的区别
相信大家经常看到对比一些PHP应用中,说用isset() 替换 strlen(),isset比strlen执行速度快等. 例子: if ( isset($username[5]) ) { // The ...
随机推荐
- 大话数据结构pdf高清版下载
大话数据结构PDF下载 不得不说严老师版的虽然比较经典,但是真的有点难理解啊,而大话数据结构这本书还是比较不错的,通俗易懂,反正我个人觉得很不错,希望对诸位有帮助. 链接:点击打开 密码:xovz p ...
- VmWare安装centos7无法上网
1.关闭防火墙 systemctl stop firewalld.service #关闭 systemctl restart firewalld.service #重启 2.虚拟机->设置-&g ...
- sql语句学习（NOT EXISTS 和 NOT IN ）
NOT EXISTS SELECT a.*FROM t_user aWHERE a.id_card LIKE '%3203821995100%'AND NOT EXISTS ( SELECT id F ...
- JUnit单元测试实践：测试工具类和方法(EmptyUtils)
以前的时候(读大学时),我认为写单元测试太费事了.现在,我改变看法了. 工作中,为了提高Web开发的质量和效率,近期又为了保证自己的工具类等一系列可复用组件的质量,我煞费苦心地开始认真学习和撰写单元测 ...
- android的数据与访问(2)-delphi xe7如何存取我的app配置参数文件？
这种方法不推荐,因为该SharedPreference是android的方法.你想跨平台,在ios上就不能使用.建议还是用ini or xml.android因为读写该二种文件比较繁琐,所以推出自己简 ...
- base64模块 简单了解
base64,字符串文本编码解码,方便数据进行传输 import base64 '''编码解码''' st = 'ni hao'.encode('utf8') result = base64.b64e ...
- Spring Cloud-hystrix(六)
作用 防止 多个服务相互交互时某个服务运行缓慢导致调用方线程挂起,高并发情况下 导致挂起线太多 引起调用方的服务不可用 能够在服务发生故障或者通过断路器监控向调用方返回一个错误 而不是长时间的等待 S ...
- Windows 2003 IIS 不支持ASP的问题
Windows 2003 IIS 不支持ASP的问题 问题: HTTP 错误 404 - 文件或目录未找到. Internet 信息服务 (IIS) 第一步,启用Asp,进入:控制面板 -> 管 ...
- ACDream - Dynamic Inversions II
先上题目: A - Dynamic Inversions II Time Limit: 6000/3000MS (Java/Others) Memory Limit: 128000/64000KB ( ...
- [Project]微信项目感悟
一定要先考虑好可复用部分,可以复制粘贴的地方 一定要先想好了在动 前台不同插件之间的兼容性问题可能是dom加载顺序的问题,有的代码可能要卸载其中一个插件的某个事件里