otool -l 可执行文件结构
otool -l /Users/zzf073/Desktop/FqlMerchantX
/Users/zzf073/Desktop/FqlMerchantX:
Mach header
magic cputype cpusubtype caps filetype ncmds sizeofcmds flags
0xfeedfacf 16777228 0 0x00 2 45 5472 0x00200085
Load command 0
cmd LC_SEGMENT_64
cmdsize 72
segname __PAGEZERO
vmaddr 0x0000000000000000
vmsize 0x0000000100000000
fileoff 0
filesize 0
maxprot 0x00000000
initprot 0x00000000
nsects 0
flags 0x0
Load command 1
cmd LC_SEGMENT_64
cmdsize 952
segname __TEXT
vmaddr 0x0000000100000000
vmsize 0x00000000004cc000
fileoff 0
filesize 5029888
maxprot 0x00000005
initprot 0x00000005
nsects 11
flags 0x0
Section
sectname __text
segname __TEXT
addr 0x0000000100005700
size 0x00000000003fae50
offset 22272
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __stubs
segname __TEXT
addr 0x0000000100400550
size 0x0000000000001cec
offset 4195664
align 2^1 (2)
reloff 0
nreloc 0
flags 0x80000408
reserved1 0 (index into indirect symbol table)
reserved2 12 (size of stubs)
Section
sectname __stub_helper
segname __TEXT
addr 0x000000010040223c
size 0x0000000000001d04
offset 4203068
align 2^2 (4)
reloff 0
nreloc 0
flags 0x80000400
reserved1 0
reserved2 0
Section
sectname __const
segname __TEXT
addr 0x0000000100403f40
size 0x0000000000009380
offset 4210496
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classname
segname __TEXT
addr 0x000000010040d2c0
size 0x0000000000004676
offset 4248256
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methname
segname __TEXT
addr 0x0000000100411936
size 0x0000000000037795
offset 4266294
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __objc_methtype
segname __TEXT
addr 0x00000001004490cb
size 0x0000000000008fb0
offset 4493515
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __cstring
segname __TEXT
addr 0x000000010045207b
size 0x000000000004598c
offset 4530299
align 2^0 (1)
reloff 0
nreloc 0
flags 0x00000002
reserved1 0
reserved2 0
Section
sectname __gcc_except_tab
segname __TEXT
addr 0x0000000100497a08
size 0x0000000000021c18
offset 4815368
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __ustring
segname __TEXT
addr 0x00000001004b9620
size 0x0000000000007630
offset 4953632
align 2^1 (2)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __unwind_info
segname __TEXT
addr 0x00000001004c0c50
size 0x000000000000b3a4
offset 4983888
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Load command 2
cmd LC_SEGMENT_64
cmdsize 1672
segname __DATA
vmaddr 0x00000001004cc000
vmsize 0x0000000000100000
fileoff 5029888
filesize 1048576
maxprot 0x00000003
initprot 0x00000003
nsects 20
flags 0x0
Section
sectname __got
segname __DATA
addr 0x00000001004cc000
size 0x00000000000007f8
offset 5029888
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000006
reserved1 617 (index into indirect symbol table)
reserved2 0
Section
sectname __la_symbol_ptr
segname __DATA
addr 0x00000001004cc7f8
size 0x0000000000001348
offset 5031928
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000007
reserved1 872 (index into indirect symbol table)
reserved2 0
Section
sectname __mod_init_func
segname __DATA
addr 0x00000001004cdb40
size 0x0000000000000008
offset 5036864
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000009
reserved1 0
reserved2 0
Section
sectname __const
segname __DATA
addr 0x00000001004cdb50
size 0x00000000000132f0
offset 5036880
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __cfstring
segname __DATA
addr 0x00000001004e0e40
size 0x000000000001e9c0
offset 5115456
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classlist
segname __DATA
addr 0x00000001004ff800
size 0x0000000000001700
offset 5240832
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlclslist
segname __DATA
addr 0x0000000100500f00
size 0x0000000000000038
offset 5246720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_catlist
segname __DATA
addr 0x0000000100500f38
size 0x0000000000000328
offset 5246776
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_nlcatlist
segname __DATA
addr 0x0000000100501260
size 0x0000000000000048
offset 5247584
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_protolist
segname __DATA
addr 0x00000001005012a8
size 0x0000000000000310
offset 5247656
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_imageinfo
segname __DATA
addr 0x00000001005015b8
size 0x0000000000000008
offset 5248440
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_const
segname __DATA
addr 0x00000001005015c0
size 0x00000000000a25e0
offset 5248448
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_selrefs
segname __DATA
addr 0x00000001005a3ba0
size 0x000000000000e728
offset 5913504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000005
reserved1 0
reserved2 0
Section
sectname __objc_protorefs
segname __DATA
addr 0x00000001005b22c8
size 0x0000000000000028
offset 5972680
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_classrefs
segname __DATA
addr 0x00000001005b22f0
size 0x0000000000001708
offset 5972720
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_superrefs
segname __DATA
addr 0x00000001005b39f8
size 0x0000000000001080
offset 5978616
align 2^3 (8)
reloff 0
nreloc 0
flags 0x10000000
reserved1 0
reserved2 0
Section
sectname __objc_ivar
segname __DATA
addr 0x00000001005b4a78
size 0x0000000000003584
offset 5982840
align 2^2 (4)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __objc_data
segname __DATA
addr 0x00000001005b8000
size 0x000000000000e650
offset 5996544
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __data
segname __DATA
addr 0x00000001005c6650
size 0x0000000000002660
offset 6055504
align 2^3 (8)
reloff 0
nreloc 0
flags 0x00000000
reserved1 0
reserved2 0
Section
sectname __bss
segname __DATA
addr 0x00000001005c8cb0
size 0x0000000000000ca8
offset 0
align 2^4 (16)
reloff 0
nreloc 0
flags 0x00000001
reserved1 0
reserved2 0
Load command 3
cmd LC_SEGMENT_64
cmdsize 72
segname __LINKEDIT
vmaddr 0x00000001005cc000
vmsize 0x00000000002c8000
fileoff 6078464
filesize 2912720
maxprot 0x00000001
initprot 0x00000001
nsects 0
flags 0x0
Load command 4
cmd LC_DYLD_INFO_ONLY
cmdsize 48
rebase_off 6078464
rebase_size 25872
bind_off 6104336
bind_size 19408
weak_bind_off 0
weak_bind_size 0
lazy_bind_off 6123744
lazy_bind_size 17448
export_off 6141192
export_size 57936
Load command 5
cmd LC_SYMTAB
cmdsize 24
symoff 6225184
nsyms 63787
stroff 7251732
strsize 1616648
Load command 6
cmd LC_DYSYMTAB
cmdsize 80
ilocalsym 0
nlocalsym 60366
iextdefsym 60366
nextdefsym 2346
iundefsym 62712
nundefsym 1075
tocoff 0
ntoc 0
modtaboff 0
nmodtab 0
extrefsymoff 0
nextrefsyms 0
indirectsymoff 7245776
nindirectsyms 1489
extreloff 0
nextrel 0
locreloff 0
nlocrel 0
Load command 7
cmd LC_LOAD_DYLINKER
cmdsize 32
name /usr/lib/dyld (offset 12)
Load command 8
cmd LC_UUID
cmdsize 24
uuid 8C542E5F-8DEA-3A66-A406-1AFC89E7B94D
Load command 9
cmd LC_VERSION_MIN_IPHONEOS
cmdsize 16
version 7.1
sdk 11.2
Load command 10
cmd LC_SOURCE_VERSION
cmdsize 16
version 0.0
Load command 11
cmd LC_MAIN
cmdsize 24
entryoff 1788788
stacksize 0
Load command 12
cmd LC_ENCRYPTION_INFO_64
cmdsize 24
cryptoff 16384
cryptsize 5013504
cryptid 0
pad 0
Load command 13
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/ImageIO.framework/ImageIO (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 14
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/AssetsLibrary.framework/AssetsLibrary (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 15
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/MobileCoreServices.framework/MobileCoreServices (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 822.19.0
compatibility version 1.0.0
Load command 16
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AudioToolbox.framework/AudioToolbox (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 492.0.0
compatibility version 1.0.0
Load command 17
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Accelerate.framework/Accelerate (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 4.0.0
compatibility version 1.0.0
Load command 18
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/CoreText.framework/CoreText (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 19
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 604.4.7
compatibility version 1.0.0
Load command 20
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreBluetooth.framework/CoreBluetooth (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 21
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreLocation.framework/CoreLocation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2237.0.22
compatibility version 1.0.0
Load command 22
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/AVFoundation.framework/AVFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 2.0.0
compatibility version 1.0.0
Load command 23
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreTelephony.framework/CoreTelephony (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 0.0.0
compatibility version 1.0.0
Load command 24
cmd LC_LOAD_DYLIB
cmdsize 104
name /System/Library/Frameworks/SystemConfiguration.framework/SystemConfiguration (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 963.30.1
compatibility version 1.0.0
Load command 25
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/Security.framework/Security (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 58286.32.2
compatibility version 1.0.0
Load command 26
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libsqlite3.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 274.6.0
compatibility version 9.0.0
Load command 27
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libz.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.2.11
compatibility version 1.0.0
Load command 28
cmd LC_LOAD_DYLIB
cmdsize 48
name /usr/lib/libc++.1.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 400.9.1
compatibility version 1.0.0
Load command 29
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/Foundation.framework/Foundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 300.0.0
Load command 30
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libobjc.A.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 228.0.0
compatibility version 1.0.0
Load command 31
cmd LC_LOAD_DYLIB
cmdsize 56
name /usr/lib/libSystem.B.dylib (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1252.0.0
compatibility version 1.0.0
Load command 32
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CFNetwork.framework/CFNetwork (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 893.14.0
compatibility version 1.0.0
Load command 33
cmd LC_LOAD_DYLIB
cmdsize 96
name /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1450.14.0
compatibility version 150.0.0
Load command 34
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreGraphics.framework/CoreGraphics (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1129.2.1
compatibility version 64.0.0
Load command 35
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/CoreImage.framework/CoreImage (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 5.0.0
compatibility version 1.0.0
Load command 36
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/MapKit.framework/MapKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 14.0.0
compatibility version 1.0.0
Load command 37
cmd LC_LOAD_WEAK_DYLIB
cmdsize 80
name /System/Library/Frameworks/Photos.framework/Photos (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 38
cmd LC_LOAD_DYLIB
cmdsize 88
name /System/Library/Frameworks/QuartzCore.framework/QuartzCore (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.11.0
compatibility version 1.2.0
Load command 39
cmd LC_LOAD_DYLIB
cmdsize 80
name /System/Library/Frameworks/UIKit.framework/UIKit (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 3698.33.6
compatibility version 1.0.0
Load command 40
cmd LC_LOAD_WEAK_DYLIB
cmdsize 104
name /System/Library/Frameworks/UserNotifications.framework/UserNotifications (offset 24)
time stamp 2 Thu Jan 1 08:00:02 1970
current version 1.0.0
compatibility version 1.0.0
Load command 41
cmd LC_RPATH
cmdsize 40
path @executable_path/Frameworks (offset 12)
Load command 42
cmd LC_FUNCTION_STARTS
cmdsize 16
dataoff 6199128
datasize 25832
Load command 43
cmd LC_DATA_IN_CODE
cmdsize 16
dataoff 6224960
datasize 224
Load command 44
cmd LC_CODE_SIGNATURE
cmdsize 16
dataoff 8868384
datasize 122800
otool -l 可执行文件结构的更多相关文章
- iOS逆向+越狱
感觉本文涉及内容有点多的,但是自己不愿意写太多,就简单的谢谢关于ios上手的东西吧 初级入手不免要用到,pp助手,i4 tools等 iOS逆向-ipa包重签名及非越狱手机安装多个应用 1.常识 我们 ...
- iOS逆向系列-Mach-O文件
概述 Mach-O是Mach object的缩写,是Mac\iOS上用于存储程序.库的标准格式. 常见的Mach-O文件 属于Mach-O格式的文件类型有. 可以在xnu源码中,查看到Mach-O格式 ...
- iOS逆向系列-脱壳
概述 通过iOS逆向系列-逆向App中使用class-dump工具导出App的Mach-O文件所有头文件.Hopper工具分析App的Mach-O文件代码大概实现.但是这些前体是App的Mach-O没 ...
- otool介绍（转http://www.mc2lab.com/?p=68）
1. Otool简介 Otool可以提取并显示ios下目标文件的相关信息,包括头部,加载命令,各个段,共享库,动态库等等.它拥有大量的命令选项,是一个功能强大的分析工具,当然还可以做反汇编的工具使用. ...
- 了解iOS上的可执行文件和Mach-O格式
http://www.cocoachina.com/mac/20150122/10988.html http://www.reinterpretcast.com/hello-world-mach-o ...
- 手写PE结构解析工具
PE格式是 Windows下最常用的可执行文件格式,理解PE文件格式不仅可以了解操作系统的加载流程,还可以更好的理解操作系统对进程和内存相关的管理知识,而有些技术必须建立在了解PE文件格式的基础上,如 ...
- SqList *L 和 SqList * &L的区别/学习数据结构突然发现不太懂 小祥我查找总结了一下
小祥在学习李春葆的数据结构教程时发现一个小问题,建立顺序表和输出线性表,这两个函数的形参是不一样的. 代码在这里↓↓↓ //定义顺序表L的结构体 typedef struct { Elemtype d ...
- otool
一.简介 二.实例 1)查看动态链接库 otool -L /usr/bin/vim
- PHP 语言结构（Language constructs）和函数的区别
相信大家经常看到对比一些PHP应用中,说用isset() 替换 strlen(),isset比strlen执行速度快等. 例子: if ( isset($username[5]) ) { // The ...
随机推荐
- Linux—Ubuntu14.0.5安装MySQL
1.更新资援列表 sudo apt-get update 2.安装mysql的操作命令(下一步选中“Y”) sudo apt-get install mysql-server 3.输入MySQLroo ...
- 当样式中存在!important时无法使用show()或hide() 2017-06-11 22:25 15人阅读 评论(0) 收藏
如果使用!important在你的样式中,比如display: none !important,此时就不能用show()了 但是我在查阅资料时发现有这样的解释, If using !important ...
- Python学习笔记之文件处理
1.打开和关闭 要打开文件可以使用函数 open(),它位于自动导入模块 io 中.函数将文件名作为唯一不可缺少的函数,并返回一个文件对象.它还有一个名叫 mode 的参数,用于指定文件模式,其可取值 ...
- 【例题4-2 uva489】Hangman Judge
[链接] 我是链接,点我呀:) [题意] 在这里输入题意 [题解] 水题. 中间就赢了算赢.(重复说,算错 [代码] #include <bits/stdc++.h> using name ...
- PCA降维技术
PCA降维技术 PCA 降维 Fly Time: 2017-2-28 主成分分析(PCA) PCA Algorithm 实例 主成分分析(PCA) 主成分分析(Principal Component ...
- BZOJ 1455 罗马游戏 左偏树
题目大意:给定n个点,每一个点有一个权值,提供两种操作: 1.将两个点所在集合合并 2.将一个点所在集合的最小的点删除并输出权值 非常裸的可并堆 n<=100W 启示式合并不用想了 左偏树就是快 ...
- oracle 数据库开发面试题
近期參加了数场面试,总结一下竞聘oracle 开发岗位最常问到哪些问题: 1.delete 与 truncate 差别? 1)truncate 是DDL语句.delete 是DML语句: 2)trun ...
- JeeCG团队招聘啦！
JeeCG团队招聘啦! 小团队攻坚,创业氛围浓厚.盼望有激情的你增加. 岗位描写叙述: 1,负责Jeecg.jeewx 微信管理系统相关的研发工作.2,高度參与整个产品设计.參与微信相关项目开发.3. ...
- 转：APP测试总结
- Linux系统的命令源码的获取方法
我们知道,Linux是开源的,它自带的功能强大的命令也是开源的,也就是说.我们能够获得这些命令的源码并研究它.那到底怎样获得系统的命令的源码呢? 命令的源码是一个软件包为单元的,放在一个软件包的源码中 ...