mirror of
https://github.com/wader/fq.git
synced 2024-12-02 12:45:53 +03:00
464 lines
52 KiB
Plaintext
464 lines
52 KiB
Plaintext
$ fq -d macho dv a_stripped
|
|
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: a_stripped (macho) 0x0-0xc357.7 (50008)
|
|
| | | header{}: 0x0-0x1f.7 (32)
|
|
| | | arch_bits: 64 0x0-NA (0)
|
|
0x0000|cf fa ed fe |.... | magic: 4277009103 (64-bit little endian) 0x0-0x3.7 (4)
|
|
| | | bits: 64 0x4-NA (0)
|
|
| | | endian: "little_endian" 0x4-NA (0)
|
|
0x0000| 0c 00 00 01 | .... | cputype: "CPU_TYPE_ARM64" (16777228) 0x4-0x7.7 (4)
|
|
0x0000| 00 00 00 00 | .... | cpusubtype: 0 0x8-0xb.7 (4)
|
|
0x0000| 02 00 00 00| ....| filetype: "MH_EXECUTE" (2) 0xc-0xf.7 (4)
|
|
0x0010|12 00 00 00 |.... | ncdms: 18 0x10-0x13.7 (4)
|
|
0x0010| 90 05 00 00 | .... | sizeofncdms: 1424 0x14-0x17.7 (4)
|
|
| | | flags{}: 0x18-0x1b.7 (4)
|
|
0x0010| 85 00 20 00 | .. . | flags: 2097285 0x18-0x1b.7 (4)
|
|
| | | MH_NOUNDEFS: true 0x1c-NA (0)
|
|
| | | MH_INCRLINK: false 0x1c-NA (0)
|
|
| | | MH_DYLDLINK: true 0x1c-NA (0)
|
|
| | | MH_BINDATLOAD: false 0x1c-NA (0)
|
|
| | | MH_PREBOUND: false 0x1c-NA (0)
|
|
| | | MH_SPLIT_SEGS: false 0x1c-NA (0)
|
|
| | | MH_LAZY_INIT: false 0x1c-NA (0)
|
|
| | | MH_TWOLEVEL: true 0x1c-NA (0)
|
|
| | | MH_FORCE_FLAT: false 0x1c-NA (0)
|
|
| | | MH_NOMULTIDEFS: false 0x1c-NA (0)
|
|
| | | MH_NOFIXPREBINDING: false 0x1c-NA (0)
|
|
| | | MH_PREBINDABLE: false 0x1c-NA (0)
|
|
| | | MH_ALLMODSBOUND: false 0x1c-NA (0)
|
|
| | | MH_SUBSECTIONS_VIA_SYMBOLS: false 0x1c-NA (0)
|
|
| | | MH_CANONICAL: false 0x1c-NA (0)
|
|
| | | MH_WEAK_DEFINES: false 0x1c-NA (0)
|
|
| | | MH_BINDS_TO_WEAK: false 0x1c-NA (0)
|
|
| | | MH_ALLOW_STACK_EXECUTION: false 0x1c-NA (0)
|
|
| | | MH_ROOT_SAFE: false 0x1c-NA (0)
|
|
| | | MH_SETUID_SAFE: false 0x1c-NA (0)
|
|
| | | MH_NO_REEXPORTED_DYLIBS: false 0x1c-NA (0)
|
|
| | | MH_PIE: true 0x1c-NA (0)
|
|
| | | MH_DEAD_STRIPPABLE_DYLIB: false 0x1c-NA (0)
|
|
| | | MH_HAS_TLV_DESCRIPTORS: false 0x1c-NA (0)
|
|
| | | MH_NO_HEAP_EXECUTION: false 0x1c-NA (0)
|
|
| | | MH_APP_EXTENSION_SAFE: false 0x1c-NA (0)
|
|
0x0010| 00 00 00 00| ....| reserved: raw bits (all zero) 0x1c-0x1f.7 (4)
|
|
| | | load_commands[0:18]: 0x20-0x5af.7 (1424)
|
|
| | | [0]{}: load_command 0x20-0x67.7 (72)
|
|
0x0020|19 00 00 00 |.... | cmd: "segment_64" (25) 0x20-0x23.7 (4)
|
|
0x0020| 48 00 00 00 | H... | cmdsize: 72 0x24-0x27.7 (4)
|
|
| | | segment_command{}: 0x28-0x67.7 (64)
|
|
| | | arch_bits: 64 0x28-NA (0)
|
|
0x0020| 5f 5f 50 41 47 45 5a 45| __PAGEZE| segname: "__PAGEZERO" 0x28-0x37.7 (16)
|
|
0x0030|52 4f 00 00 00 00 00 00 |RO...... |
|
|
0x0030| 00 00 00 00 00 00 00 00| ........| vmaddr: 0x0 0x38-0x3f.7 (8)
|
|
0x0040|00 00 00 00 01 00 00 00 |........ | vmsize: 4294967296 0x40-0x47.7 (8)
|
|
0x0040| 00 00 00 00 00 00 00 00| ........| fileoff: 0 0x48-0x4f.7 (8)
|
|
0x0050|00 00 00 00 00 00 00 00 |........ | tfilesize: 0 0x50-0x57.7 (8)
|
|
0x0050| 00 00 00 00 | .... | initprot: 0 0x58-0x5b.7 (4)
|
|
0x0050| 00 00 00 00| ....| maxprot: 0 0x5c-0x5f.7 (4)
|
|
0x0060|00 00 00 00 |.... | nsects: 0 0x60-0x63.7 (4)
|
|
| | | flags{}: 0x64-0x67.7 (4)
|
|
0x0060| 00 00 00 00 | .... | flags: 0 0x64-0x67.7 (4)
|
|
| | | SG_HIGHVM: false 0x68-NA (0)
|
|
| | | SG_FVMLIB: false 0x68-NA (0)
|
|
| | | SG_NORELOC: false 0x68-NA (0)
|
|
| | | SG_PROTECTED_VERSION_1: false 0x68-NA (0)
|
|
| | | sections[0:0]: 0x68-NA (0)
|
|
| | | [1]{}: load_command 0x68-0x23f.7 (472)
|
|
0x0060| 19 00 00 00 | .... | cmd: "segment_64" (25) 0x68-0x6b.7 (4)
|
|
0x0060| d8 01 00 00| ....| cmdsize: 472 0x6c-0x6f.7 (4)
|
|
| | | segment_command{}: 0x70-0xaf.7 (64)
|
|
| | | arch_bits: 64 0x70-NA (0)
|
|
0x0070|5f 5f 54 45 58 54 00 00 00 00 00 00 00 00 00 00|__TEXT..........| segname: "__TEXT" 0x70-0x7f.7 (16)
|
|
0x0080|00 00 00 00 01 00 00 00 |........ | vmaddr: 0x100000000 0x80-0x87.7 (8)
|
|
0x0080| 00 40 00 00 00 00 00 00| .@......| vmsize: 16384 0x88-0x8f.7 (8)
|
|
0x0090|00 00 00 00 00 00 00 00 |........ | fileoff: 0 0x90-0x97.7 (8)
|
|
0x0090| 00 40 00 00 00 00 00 00| .@......| tfilesize: 16384 0x98-0x9f.7 (8)
|
|
0x00a0|05 00 00 00 |.... | initprot: 5 0xa0-0xa3.7 (4)
|
|
0x00a0| 05 00 00 00 | .... | maxprot: 5 0xa4-0xa7.7 (4)
|
|
0x00a0| 05 00 00 00 | .... | nsects: 5 0xa8-0xab.7 (4)
|
|
| | | flags{}: 0xac-0xaf.7 (4)
|
|
0x00a0| 00 00 00 00| ....| flags: 0 0xac-0xaf.7 (4)
|
|
| | | SG_HIGHVM: false 0xb0-NA (0)
|
|
| | | SG_FVMLIB: false 0xb0-NA (0)
|
|
| | | SG_NORELOC: false 0xb0-NA (0)
|
|
| | | SG_PROTECTED_VERSION_1: false 0xb0-NA (0)
|
|
| | | sections[0:5]: 0xb0-0x23f.7 (400)
|
|
| | | [0]{}: section 0xb0-0xff.7 (80)
|
|
0x00b0|5f 5f 74 65 78 74 00 00 00 00 00 00 00 00 00 00|__text..........| sectname: "__text" 0xb0-0xbf.7 (16)
|
|
0x00c0|5f 5f 54 45 58 54 00 00 00 00 00 00 00 00 00 00|__TEXT..........| segname: "__TEXT" 0xc0-0xcf.7 (16)
|
|
0x00d0|30 3f 00 00 01 00 00 00 |0?...... | address: 0x100003f30 0xd0-0xd7.7 (8)
|
|
0x00d0| 38 00 00 00 00 00 00 00| 8.......| size: 56 0xd8-0xdf.7 (8)
|
|
0x00e0|30 3f 00 00 |0?.. | offset: 16176 0xe0-0xe3.7 (4)
|
|
0x00e0| 02 00 00 00 | .... | align: 2 0xe4-0xe7.7 (4)
|
|
0x00e0| 00 00 00 00 | .... | reloff: 0 0xe8-0xeb.7 (4)
|
|
0x00e0| 00 00 00 00| ....| nreloc: 0 0xec-0xef.7 (4)
|
|
| | | flags{}: 0xf0-0xf3.7 (4)
|
|
0x00f0|00 04 00 80 |.... | flags: 2147484672 0xf0-0xf3.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0xf4-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0xf4-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: true 0xf4-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0xf4-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0xf4-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0xf4-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0xf4-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0xf4-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0xf4-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: true 0xf4-NA (0)
|
|
| | | type: "S_REGULAR" 0xf4-NA (0)
|
|
0x00f0| 00 00 00 00 | .... | reserved1: 0 0xf4-0xf7.7 (4)
|
|
0x00f0| 00 00 00 00 | .... | reserved2: 0 0xf8-0xfb.7 (4)
|
|
0x00f0| 00 00 00 00| ....| reserved3: 0 0xfc-0xff.7 (4)
|
|
| | | [1]{}: section 0x100-0x14f.7 (80)
|
|
0x0100|5f 5f 73 74 75 62 73 00 00 00 00 00 00 00 00 00|__stubs.........| sectname: "__stubs" 0x100-0x10f.7 (16)
|
|
0x0110|5f 5f 54 45 58 54 00 00 00 00 00 00 00 00 00 00|__TEXT..........| segname: "__TEXT" 0x110-0x11f.7 (16)
|
|
0x0120|68 3f 00 00 01 00 00 00 |h?...... | address: 0x100003f68 0x120-0x127.7 (8)
|
|
0x0120| 18 00 00 00 00 00 00 00| ........| size: 24 0x128-0x12f.7 (8)
|
|
0x0130|68 3f 00 00 |h?.. | offset: 16232 0x130-0x133.7 (4)
|
|
0x0130| 02 00 00 00 | .... | align: 2 0x134-0x137.7 (4)
|
|
0x0130| 00 00 00 00 | .... | reloff: 0 0x138-0x13b.7 (4)
|
|
0x0130| 00 00 00 00| ....| nreloc: 0 0x13c-0x13f.7 (4)
|
|
| | | flags{}: 0x140-0x143.7 (4)
|
|
0x0140|08 04 00 80 |.... | flags: 2147484680 0x140-0x143.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0x144-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0x144-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: true 0x144-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0x144-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0x144-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0x144-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0x144-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0x144-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0x144-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: true 0x144-NA (0)
|
|
| | | type: "S_SYMBOL_STUBS" 0x144-NA (0)
|
|
0x0140| 00 00 00 00 | .... | reserved1: 0 0x144-0x147.7 (4)
|
|
0x0140| 0c 00 00 00 | .... | reserved2: 12 0x148-0x14b.7 (4)
|
|
0x0140| 00 00 00 00| ....| reserved3: 0 0x14c-0x14f.7 (4)
|
|
| | | [2]{}: section 0x150-0x19f.7 (80)
|
|
0x0150|5f 5f 73 74 75 62 5f 68 65 6c 70 65 72 00 00 00|__stub_helper...| sectname: "__stub_helper" 0x150-0x15f.7 (16)
|
|
0x0160|5f 5f 54 45 58 54 00 00 00 00 00 00 00 00 00 00|__TEXT..........| segname: "__TEXT" 0x160-0x16f.7 (16)
|
|
0x0170|80 3f 00 00 01 00 00 00 |.?...... | address: 0x100003f80 0x170-0x177.7 (8)
|
|
0x0170| 30 00 00 00 00 00 00 00| 0.......| size: 48 0x178-0x17f.7 (8)
|
|
0x0180|80 3f 00 00 |.?.. | offset: 16256 0x180-0x183.7 (4)
|
|
0x0180| 02 00 00 00 | .... | align: 2 0x184-0x187.7 (4)
|
|
0x0180| 00 00 00 00 | .... | reloff: 0 0x188-0x18b.7 (4)
|
|
0x0180| 00 00 00 00| ....| nreloc: 0 0x18c-0x18f.7 (4)
|
|
| | | flags{}: 0x190-0x193.7 (4)
|
|
0x0190|00 04 00 80 |.... | flags: 2147484672 0x190-0x193.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0x194-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0x194-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: true 0x194-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0x194-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0x194-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0x194-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0x194-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0x194-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0x194-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: true 0x194-NA (0)
|
|
| | | type: "S_REGULAR" 0x194-NA (0)
|
|
0x0190| 00 00 00 00 | .... | reserved1: 0 0x194-0x197.7 (4)
|
|
0x0190| 00 00 00 00 | .... | reserved2: 0 0x198-0x19b.7 (4)
|
|
0x0190| 00 00 00 00| ....| reserved3: 0 0x19c-0x19f.7 (4)
|
|
| | | [3]{}: section 0x1a0-0x1ef.7 (80)
|
|
0x01a0|5f 5f 63 73 74 72 69 6e 67 00 00 00 00 00 00 00|__cstring.......| sectname: "__cstring" 0x1a0-0x1af.7 (16)
|
|
0x01b0|5f 5f 54 45 58 54 00 00 00 00 00 00 00 00 00 00|__TEXT..........| segname: "__TEXT" 0x1b0-0x1bf.7 (16)
|
|
0x01c0|b0 3f 00 00 01 00 00 00 |.?...... | address: 0x100003fb0 0x1c0-0x1c7.7 (8)
|
|
0x01c0| 05 00 00 00 00 00 00 00| ........| size: 5 0x1c8-0x1cf.7 (8)
|
|
0x01d0|b0 3f 00 00 |.?.. | offset: 16304 0x1d0-0x1d3.7 (4)
|
|
0x01d0| 00 00 00 00 | .... | align: 0 0x1d4-0x1d7.7 (4)
|
|
0x01d0| 00 00 00 00 | .... | reloff: 0 0x1d8-0x1db.7 (4)
|
|
0x01d0| 00 00 00 00| ....| nreloc: 0 0x1dc-0x1df.7 (4)
|
|
| | | flags{}: 0x1e0-0x1e3.7 (4)
|
|
0x01e0|02 00 00 00 |.... | flags: 2 0x1e0-0x1e3.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0x1e4-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0x1e4-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: false 0x1e4-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0x1e4-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0x1e4-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0x1e4-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0x1e4-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0x1e4-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0x1e4-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: false 0x1e4-NA (0)
|
|
| | | type: "S_CSTRING_LITERALS" 0x1e4-NA (0)
|
|
0x01e0| 00 00 00 00 | .... | reserved1: 0 0x1e4-0x1e7.7 (4)
|
|
0x01e0| 00 00 00 00 | .... | reserved2: 0 0x1e8-0x1eb.7 (4)
|
|
0x01e0| 00 00 00 00| ....| reserved3: 0 0x1ec-0x1ef.7 (4)
|
|
| | | [4]{}: section 0x1f0-0x23f.7 (80)
|
|
0x01f0|5f 5f 75 6e 77 69 6e 64 5f 69 6e 66 6f 00 00 00|__unwind_info...| sectname: "__unwind_info" 0x1f0-0x1ff.7 (16)
|
|
0x0200|5f 5f 54 45 58 54 00 00 00 00 00 00 00 00 00 00|__TEXT..........| segname: "__TEXT" 0x200-0x20f.7 (16)
|
|
0x0210|b8 3f 00 00 01 00 00 00 |.?...... | address: 0x100003fb8 0x210-0x217.7 (8)
|
|
0x0210| 48 00 00 00 00 00 00 00| H.......| size: 72 0x218-0x21f.7 (8)
|
|
0x0220|b8 3f 00 00 |.?.. | offset: 16312 0x220-0x223.7 (4)
|
|
0x0220| 02 00 00 00 | .... | align: 2 0x224-0x227.7 (4)
|
|
0x0220| 00 00 00 00 | .... | reloff: 0 0x228-0x22b.7 (4)
|
|
0x0220| 00 00 00 00| ....| nreloc: 0 0x22c-0x22f.7 (4)
|
|
| | | flags{}: 0x230-0x233.7 (4)
|
|
0x0230|00 00 00 00 |.... | flags: 0 0x230-0x233.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0x234-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0x234-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: false 0x234-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0x234-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0x234-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0x234-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0x234-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0x234-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0x234-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: false 0x234-NA (0)
|
|
| | | type: "S_REGULAR" 0x234-NA (0)
|
|
0x0230| 00 00 00 00 | .... | reserved1: 0 0x234-0x237.7 (4)
|
|
0x0230| 00 00 00 00 | .... | reserved2: 0 0x238-0x23b.7 (4)
|
|
0x0230| 00 00 00 00| ....| reserved3: 0 0x23c-0x23f.7 (4)
|
|
| | | [2]{}: load_command 0x240-0x2d7.7 (152)
|
|
0x0240|19 00 00 00 |.... | cmd: "segment_64" (25) 0x240-0x243.7 (4)
|
|
0x0240| 98 00 00 00 | .... | cmdsize: 152 0x244-0x247.7 (4)
|
|
| | | segment_command{}: 0x248-0x287.7 (64)
|
|
| | | arch_bits: 64 0x248-NA (0)
|
|
0x0240| 5f 5f 44 41 54 41 5f 43| __DATA_C| segname: "__DATA_CONST" 0x248-0x257.7 (16)
|
|
0x0250|4f 4e 53 54 00 00 00 00 |ONST.... |
|
|
0x0250| 00 40 00 00 01 00 00 00| .@......| vmaddr: 0x100004000 0x258-0x25f.7 (8)
|
|
0x0260|00 40 00 00 00 00 00 00 |.@...... | vmsize: 16384 0x260-0x267.7 (8)
|
|
0x0260| 00 40 00 00 00 00 00 00| .@......| fileoff: 16384 0x268-0x26f.7 (8)
|
|
0x0270|00 40 00 00 00 00 00 00 |.@...... | tfilesize: 16384 0x270-0x277.7 (8)
|
|
0x0270| 03 00 00 00 | .... | initprot: 3 0x278-0x27b.7 (4)
|
|
0x0270| 03 00 00 00| ....| maxprot: 3 0x27c-0x27f.7 (4)
|
|
0x0280|01 00 00 00 |.... | nsects: 1 0x280-0x283.7 (4)
|
|
| | | flags{}: 0x284-0x287.7 (4)
|
|
0x0280| 10 00 00 00 | .... | flags: 16 0x284-0x287.7 (4)
|
|
| | | SG_HIGHVM: false 0x288-NA (0)
|
|
| | | SG_FVMLIB: false 0x288-NA (0)
|
|
| | | SG_NORELOC: false 0x288-NA (0)
|
|
| | | SG_PROTECTED_VERSION_1: false 0x288-NA (0)
|
|
| | | sections[0:1]: 0x288-0x2d7.7 (80)
|
|
| | | [0]{}: section 0x288-0x2d7.7 (80)
|
|
0x0280| 5f 5f 67 6f 74 00 00 00| __got...| sectname: "__got" 0x288-0x297.7 (16)
|
|
0x0290|00 00 00 00 00 00 00 00 |........ |
|
|
0x0290| 5f 5f 44 41 54 41 5f 43| __DATA_C| segname: "__DATA_CONST" 0x298-0x2a7.7 (16)
|
|
0x02a0|4f 4e 53 54 00 00 00 00 |ONST.... |
|
|
0x02a0| 00 40 00 00 01 00 00 00| .@......| address: 0x100004000 0x2a8-0x2af.7 (8)
|
|
0x02b0|08 00 00 00 00 00 00 00 |........ | size: 8 0x2b0-0x2b7.7 (8)
|
|
0x02b0| 00 40 00 00 | .@.. | offset: 16384 0x2b8-0x2bb.7 (4)
|
|
0x02b0| 03 00 00 00| ....| align: 3 0x2bc-0x2bf.7 (4)
|
|
0x02c0|00 00 00 00 |.... | reloff: 0 0x2c0-0x2c3.7 (4)
|
|
0x02c0| 00 00 00 00 | .... | nreloc: 0 0x2c4-0x2c7.7 (4)
|
|
| | | flags{}: 0x2c8-0x2cb.7 (4)
|
|
0x02c0| 06 00 00 00 | .... | flags: 6 0x2c8-0x2cb.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0x2cc-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0x2cc-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: false 0x2cc-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0x2cc-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0x2cc-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0x2cc-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0x2cc-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0x2cc-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0x2cc-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: false 0x2cc-NA (0)
|
|
| | | type: "S_NON_LAZY_SYMBOL_POINTERS" 0x2cc-NA (0)
|
|
0x02c0| 02 00 00 00| ....| reserved1: 2 0x2cc-0x2cf.7 (4)
|
|
0x02d0|00 00 00 00 |.... | reserved2: 0 0x2d0-0x2d3.7 (4)
|
|
0x02d0| 00 00 00 00 | .... | reserved3: 0 0x2d4-0x2d7.7 (4)
|
|
| | | [3]{}: load_command 0x2d8-0x3bf.7 (232)
|
|
0x02d0| 19 00 00 00 | .... | cmd: "segment_64" (25) 0x2d8-0x2db.7 (4)
|
|
0x02d0| e8 00 00 00| ....| cmdsize: 232 0x2dc-0x2df.7 (4)
|
|
| | | segment_command{}: 0x2e0-0x31f.7 (64)
|
|
| | | arch_bits: 64 0x2e0-NA (0)
|
|
0x02e0|5f 5f 44 41 54 41 00 00 00 00 00 00 00 00 00 00|__DATA..........| segname: "__DATA" 0x2e0-0x2ef.7 (16)
|
|
0x02f0|00 80 00 00 01 00 00 00 |........ | vmaddr: 0x100008000 0x2f0-0x2f7.7 (8)
|
|
0x02f0| 00 40 00 00 00 00 00 00| .@......| vmsize: 16384 0x2f8-0x2ff.7 (8)
|
|
0x0300|00 80 00 00 00 00 00 00 |........ | fileoff: 32768 0x300-0x307.7 (8)
|
|
0x0300| 00 40 00 00 00 00 00 00| .@......| tfilesize: 16384 0x308-0x30f.7 (8)
|
|
0x0310|03 00 00 00 |.... | initprot: 3 0x310-0x313.7 (4)
|
|
0x0310| 03 00 00 00 | .... | maxprot: 3 0x314-0x317.7 (4)
|
|
0x0310| 02 00 00 00 | .... | nsects: 2 0x318-0x31b.7 (4)
|
|
| | | flags{}: 0x31c-0x31f.7 (4)
|
|
0x0310| 00 00 00 00| ....| flags: 0 0x31c-0x31f.7 (4)
|
|
| | | SG_HIGHVM: false 0x320-NA (0)
|
|
| | | SG_FVMLIB: false 0x320-NA (0)
|
|
| | | SG_NORELOC: false 0x320-NA (0)
|
|
| | | SG_PROTECTED_VERSION_1: false 0x320-NA (0)
|
|
| | | sections[0:2]: 0x320-0x3bf.7 (160)
|
|
| | | [0]{}: section 0x320-0x36f.7 (80)
|
|
0x0320|5f 5f 6c 61 5f 73 79 6d 62 6f 6c 5f 70 74 72 00|__la_symbol_ptr.| sectname: "__la_symbol_ptr" 0x320-0x32f.7 (16)
|
|
0x0330|5f 5f 44 41 54 41 00 00 00 00 00 00 00 00 00 00|__DATA..........| segname: "__DATA" 0x330-0x33f.7 (16)
|
|
0x0340|00 80 00 00 01 00 00 00 |........ | address: 0x100008000 0x340-0x347.7 (8)
|
|
0x0340| 10 00 00 00 00 00 00 00| ........| size: 16 0x348-0x34f.7 (8)
|
|
0x0350|00 80 00 00 |.... | offset: 32768 0x350-0x353.7 (4)
|
|
0x0350| 03 00 00 00 | .... | align: 3 0x354-0x357.7 (4)
|
|
0x0350| 00 00 00 00 | .... | reloff: 0 0x358-0x35b.7 (4)
|
|
0x0350| 00 00 00 00| ....| nreloc: 0 0x35c-0x35f.7 (4)
|
|
| | | flags{}: 0x360-0x363.7 (4)
|
|
0x0360|07 00 00 00 |.... | flags: 7 0x360-0x363.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0x364-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0x364-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: false 0x364-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0x364-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0x364-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0x364-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0x364-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0x364-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0x364-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: false 0x364-NA (0)
|
|
| | | type: "S_LAZY_SYMBOL_POINTERS" 0x364-NA (0)
|
|
0x0360| 03 00 00 00 | .... | reserved1: 3 0x364-0x367.7 (4)
|
|
0x0360| 00 00 00 00 | .... | reserved2: 0 0x368-0x36b.7 (4)
|
|
0x0360| 00 00 00 00| ....| reserved3: 0 0x36c-0x36f.7 (4)
|
|
| | | [1]{}: section 0x370-0x3bf.7 (80)
|
|
0x0370|5f 5f 64 61 74 61 00 00 00 00 00 00 00 00 00 00|__data..........| sectname: "__data" 0x370-0x37f.7 (16)
|
|
0x0380|5f 5f 44 41 54 41 00 00 00 00 00 00 00 00 00 00|__DATA..........| segname: "__DATA" 0x380-0x38f.7 (16)
|
|
0x0390|10 80 00 00 01 00 00 00 |........ | address: 0x100008010 0x390-0x397.7 (8)
|
|
0x0390| 08 00 00 00 00 00 00 00| ........| size: 8 0x398-0x39f.7 (8)
|
|
0x03a0|10 80 00 00 |.... | offset: 32784 0x3a0-0x3a3.7 (4)
|
|
0x03a0| 03 00 00 00 | .... | align: 3 0x3a4-0x3a7.7 (4)
|
|
0x03a0| 00 00 00 00 | .... | reloff: 0 0x3a8-0x3ab.7 (4)
|
|
0x03a0| 00 00 00 00| ....| nreloc: 0 0x3ac-0x3af.7 (4)
|
|
| | | flags{}: 0x3b0-0x3b3.7 (4)
|
|
0x03b0|00 00 00 00 |.... | flags: 0 0x3b0-0x3b3.7 (4)
|
|
| | | S_ATTR_LOC_RELOC: false 0x3b4-NA (0)
|
|
| | | S_ATTR_EXT_RELOC: false 0x3b4-NA (0)
|
|
| | | S_ATTR_SOME_INSTRUCTIONS: false 0x3b4-NA (0)
|
|
| | | S_ATTR_DEBUG: false 0x3b4-NA (0)
|
|
| | | S_ATTR_SELF_MODIFYING_CODE: false 0x3b4-NA (0)
|
|
| | | S_ATTR_LIVE_SUPPORT: false 0x3b4-NA (0)
|
|
| | | S_ATTR_NO_DEAD_STRIP: false 0x3b4-NA (0)
|
|
| | | S_ATTR_STRIP_STATIC_SYMS: false 0x3b4-NA (0)
|
|
| | | S_ATTR_NO_TOC: false 0x3b4-NA (0)
|
|
| | | S_ATTR_PURE_INSTRUCTIONS: false 0x3b4-NA (0)
|
|
| | | type: "S_REGULAR" 0x3b4-NA (0)
|
|
0x03b0| 00 00 00 00 | .... | reserved1: 0 0x3b4-0x3b7.7 (4)
|
|
0x03b0| 00 00 00 00 | .... | reserved2: 0 0x3b8-0x3bb.7 (4)
|
|
0x03b0| 00 00 00 00| ....| reserved3: 0 0x3bc-0x3bf.7 (4)
|
|
| | | [4]{}: load_command 0x3c0-0x407.7 (72)
|
|
0x03c0|19 00 00 00 |.... | cmd: "segment_64" (25) 0x3c0-0x3c3.7 (4)
|
|
0x03c0| 48 00 00 00 | H... | cmdsize: 72 0x3c4-0x3c7.7 (4)
|
|
| | | segment_command{}: 0x3c8-0x407.7 (64)
|
|
| | | arch_bits: 64 0x3c8-NA (0)
|
|
0x03c0| 5f 5f 4c 49 4e 4b 45 44| __LINKED| segname: "__LINKEDIT" 0x3c8-0x3d7.7 (16)
|
|
0x03d0|49 54 00 00 00 00 00 00 |IT...... |
|
|
0x03d0| 00 c0 00 00 01 00 00 00| ........| vmaddr: 0x10000c000 0x3d8-0x3df.7 (8)
|
|
0x03e0|00 40 00 00 00 00 00 00 |.@...... | vmsize: 16384 0x3e0-0x3e7.7 (8)
|
|
0x03e0| 00 c0 00 00 00 00 00 00| ........| fileoff: 49152 0x3e8-0x3ef.7 (8)
|
|
0x03f0|58 03 00 00 00 00 00 00 |X....... | tfilesize: 856 0x3f0-0x3f7.7 (8)
|
|
0x03f0| 01 00 00 00 | .... | initprot: 1 0x3f8-0x3fb.7 (4)
|
|
0x03f0| 01 00 00 00| ....| maxprot: 1 0x3fc-0x3ff.7 (4)
|
|
0x0400|00 00 00 00 |.... | nsects: 0 0x400-0x403.7 (4)
|
|
| | | flags{}: 0x404-0x407.7 (4)
|
|
0x0400| 00 00 00 00 | .... | flags: 0 0x404-0x407.7 (4)
|
|
| | | SG_HIGHVM: false 0x408-NA (0)
|
|
| | | SG_FVMLIB: false 0x408-NA (0)
|
|
| | | SG_NORELOC: false 0x408-NA (0)
|
|
| | | SG_PROTECTED_VERSION_1: false 0x408-NA (0)
|
|
| | | sections[0:0]: 0x408-NA (0)
|
|
| | | [5]{}: load_command 0x408-0x437.7 (48)
|
|
0x0400| 22 00 00 80 | "... | cmd: "dyld_info_only" (2147483682) 0x408-0x40b.7 (4)
|
|
0x0400| 30 00 00 00| 0...| cmdsize: 48 0x40c-0x40f.7 (4)
|
|
| | | dyld_info{}: 0x410-0x437.7 (40)
|
|
0x0410|00 c0 00 00 |.... | rebase_off: 49152 0x410-0x413.7 (4)
|
|
0x0410| 08 00 00 00 | .... | rebase_size: 8 0x414-0x417.7 (4)
|
|
0x0410| 08 c0 00 00 | .... | bind_off: 49160 0x418-0x41b.7 (4)
|
|
0x0410| 18 00 00 00| ....| bind_size: 24 0x41c-0x41f.7 (4)
|
|
0x0420|00 00 00 00 |.... | weak_bind_off: 0 0x420-0x423.7 (4)
|
|
0x0420| 00 00 00 00 | .... | weak_bind_size: 0 0x424-0x427.7 (4)
|
|
0x0420| 20 c0 00 00 | ... | lazy_bind_off: 49184 0x428-0x42b.7 (4)
|
|
0x0420| 20 00 00 00| ...| lazy_bind_size: 32 0x42c-0x42f.7 (4)
|
|
0x0430|40 c0 00 00 |@... | export_off: 49216 0x430-0x433.7 (4)
|
|
0x0430| 38 00 00 00 | 8... | export_size: 56 0x434-0x437.7 (4)
|
|
| | | [6]{}: load_command 0x438-0x44f.7 (24)
|
|
0x0430| 02 00 00 00 | .... | cmd: "symtab" (2) 0x438-0x43b.7 (4)
|
|
0x0430| 18 00 00 00| ....| cmdsize: 24 0x43c-0x43f.7 (4)
|
|
0x0440|80 c0 00 00 |.... | symoff: 49280 0x440-0x443.7 (4)
|
|
0x0440| 05 00 00 00 | .... | nsyms: 5 0x444-0x447.7 (4)
|
|
0x0440| e8 c0 00 00 | .... | stroff: 49384 0x448-0x44b.7 (4)
|
|
0x0440| 50 00 00 00| P...| strsize: 80 0x44c-0x44f.7 (4)
|
|
| | | [7]{}: load_command 0x450-0x49f.7 (80)
|
|
0x0450|0b 00 00 00 |.... | cmd: "dysymtab" (11) 0x450-0x453.7 (4)
|
|
0x0450| 50 00 00 00 | P... | cmdsize: 80 0x454-0x457.7 (4)
|
|
0x0450| 00 00 00 00 | .... | ilocalsym: 0 0x458-0x45b.7 (4)
|
|
0x0450| 01 00 00 00| ....| nlocalsym: 1 0x45c-0x45f.7 (4)
|
|
0x0460|01 00 00 00 |.... | iextdefsym: 1 0x460-0x463.7 (4)
|
|
0x0460| 01 00 00 00 | .... | nextdefsym: 1 0x464-0x467.7 (4)
|
|
0x0460| 02 00 00 00 | .... | iundefsym: 2 0x468-0x46b.7 (4)
|
|
0x0460| 03 00 00 00| ....| nundefsym: 3 0x46c-0x46f.7 (4)
|
|
0x0470|00 00 00 00 |.... | tocoff: 0 0x470-0x473.7 (4)
|
|
0x0470| 00 00 00 00 | .... | ntoc: 0 0x474-0x477.7 (4)
|
|
0x0470| 00 00 00 00 | .... | modtaboff: 0 0x478-0x47b.7 (4)
|
|
0x0470| 00 00 00 00| ....| nmodtab: 0 0x47c-0x47f.7 (4)
|
|
0x0480|00 00 00 00 |.... | extrefsymoff: 0 0x480-0x483.7 (4)
|
|
0x0480| 00 00 00 00 | .... | nextrefsyms: 0 0x484-0x487.7 (4)
|
|
0x0480| d0 c0 00 00 | .... | indirectsymoff: 49360 0x488-0x48b.7 (4)
|
|
0x0480| 05 00 00 00| ....| nindirectsyms: 5 0x48c-0x48f.7 (4)
|
|
0x0490|00 00 00 00 |.... | extreloff: 0 0x490-0x493.7 (4)
|
|
0x0490| 00 00 00 00 | .... | nextrel: 0 0x494-0x497.7 (4)
|
|
0x0490| 00 00 00 00 | .... | locreloff: 0 0x498-0x49b.7 (4)
|
|
0x0490| 00 00 00 00| ....| nlocrel: 0 0x49c-0x49f.7 (4)
|
|
| | | [8]{}: load_command 0x4a0-0x4bf.7 (32)
|
|
0x04a0|0e 00 00 00 |.... | cmd: "load_dylinker" (14) 0x4a0-0x4a3.7 (4)
|
|
0x04a0| 20 00 00 00 | ... | cmdsize: 32 0x4a4-0x4a7.7 (4)
|
|
0x04a0| 0c 00 00 00 | .... | offset: 12 0x4a8-0x4ab.7 (4)
|
|
0x04a0| 2f 75 73 72| /usr| name: "/usr/lib/dyld" 0x4ac-0x4bf.7 (20)
|
|
0x04b0|2f 6c 69 62 2f 64 79 6c 64 00 00 00 00 00 00 00|/lib/dyld.......|
|
|
| | | [9]{}: load_command 0x4c0-0x4d7.7 (24)
|
|
0x04c0|1b 00 00 00 |.... | cmd: "uuid" (27) 0x4c0-0x4c3.7 (4)
|
|
0x04c0| 18 00 00 00 | .... | cmdsize: 24 0x4c4-0x4c7.7 (4)
|
|
| | | uuid_command{}: 0x4c8-0x4d7.7 (16)
|
|
0x04c0| 6a 8c 27 f0 d3 ea 34 04| j.'...4.| uuid: raw bits 0x4c8-0x4d7.7 (16)
|
|
0x04d0|84 e7 27 82 60 d7 29 b8 |..'.`.). |
|
|
| | | [10]{}: load_command 0x4d8-0x4f7.7 (32)
|
|
0x04d0| 32 00 00 00 | 2... | cmd: "build_version" (50) 0x4d8-0x4db.7 (4)
|
|
0x04d0| 20 00 00 00| ...| cmdsize: 32 0x4dc-0x4df.7 (4)
|
|
0x04e0|01 00 00 00 |.... | platform: 1 0x4e0-0x4e3.7 (4)
|
|
0x04e0| 00 00 0b 00 | .... | minos: 720896 0x4e4-0x4e7.7 (4)
|
|
0x04e0| 00 00 0b 00 | .... | sdk: 720896 0x4e8-0x4eb.7 (4)
|
|
0x04e0| 01 00 00 00| ....| ntools: 1 0x4ec-0x4ef.7 (4)
|
|
| | | tools[0:1]: 0x4f0-0x4f7.7 (8)
|
|
| | | [0]{}: tool 0x4f0-0x4f7.7 (8)
|
|
0x04f0|03 00 00 00 |.... | tool: 3 0x4f0-0x4f3.7 (4)
|
|
0x04f0| 00 00 c7 02 | .... | version: 46596096 0x4f4-0x4f7.7 (4)
|
|
| | | [11]{}: load_command 0x4f8-0x507.7 (16)
|
|
0x04f0| 2a 00 00 00 | *... | cmd: "source_version" (42) 0x4f8-0x4fb.7 (4)
|
|
0x04f0| 10 00 00 00| ....| cmdsize: 16 0x4fc-0x4ff.7 (4)
|
|
| | | source_version_tag{}: 0x500-0x507.7 (8)
|
|
0x0500|00 00 00 00 00 00 00 00 |........ | tag: 0 0x500-0x507.7 (8)
|
|
| | | [12]{}: load_command 0x508-0x51f.7 (24)
|
|
0x0500| 28 00 00 80 | (... | cmd: "main" (2147483688) 0x508-0x50b.7 (4)
|
|
0x0500| 18 00 00 00| ....| cmdsize: 24 0x50c-0x50f.7 (4)
|
|
| | | entrypoint{}: 0x510-0x51f.7 (16)
|
|
0x0510|4c 3f 00 00 00 00 00 00 |L?...... | entryoff: 16204 0x510-0x517.7 (8)
|
|
0x0510| 00 00 00 00 00 00 00 00| ........| stacksize: 0 0x518-0x51f.7 (8)
|
|
| | | [13]{}: load_command 0x520-0x547.7 (40)
|
|
0x0520|0c 00 00 00 |.... | cmd: "load_dylib" (12) 0x520-0x523.7 (4)
|
|
0x0520| 28 00 00 00 | (... | cmdsize: 40 0x524-0x527.7 (4)
|
|
| | | dylib_command{}: 0x528-0x547.7 (32)
|
|
0x0520| 18 00 00 00 | .... | offset: 24 0x528-0x52b.7 (4)
|
|
0x0520| 02 00 00 00| ....| timestamp: "1970-01-01 00:00:00.002 +0000 UTC" (2) 0x52c-0x52f.7 (4)
|
|
0x0530|00 00 00 00 |.... | current_version: 0 0x530-0x533.7 (4)
|
|
0x0530| 00 00 00 00 | .... | compatibility_version: 0 0x534-0x537.7 (4)
|
|
0x0530| 6c 69 62 62 62 62 2e 73| libbbb.s| name: "libbbb.so" 0x538-0x547.7 (16)
|
|
0x0540|6f 00 00 00 00 00 00 00 |o....... |
|
|
| | | [14]{}: load_command 0x548-0x57f.7 (56)
|
|
0x0540| 0c 00 00 00 | .... | cmd: "load_dylib" (12) 0x548-0x54b.7 (4)
|
|
0x0540| 38 00 00 00| 8...| cmdsize: 56 0x54c-0x54f.7 (4)
|
|
| | | dylib_command{}: 0x550-0x57f.7 (48)
|
|
0x0550|18 00 00 00 |.... | offset: 24 0x550-0x553.7 (4)
|
|
0x0550| 02 00 00 00 | .... | timestamp: "1970-01-01 00:00:00.002 +0000 UTC" (2) 0x554-0x557.7 (4)
|
|
0x0550| 05 64 0c 05 | .d.. | current_version: 84698117 0x558-0x55b.7 (4)
|
|
0x0550| 00 00 01 00| ....| compatibility_version: 65536 0x55c-0x55f.7 (4)
|
|
0x0560|2f 75 73 72 2f 6c 69 62 2f 6c 69 62 53 79 73 74|/usr/lib/libSyst| name: "/usr/lib/libSystem.B.dylib" 0x560-0x57f.7 (32)
|
|
0x0570|65 6d 2e 42 2e 64 79 6c 69 62 00 00 00 00 00 00|em.B.dylib......|
|
|
| | | [15]{}: load_command 0x580-0x58f.7 (16)
|
|
0x0580|26 00 00 00 |&... | cmd: "function_starts" (38) 0x580-0x583.7 (4)
|
|
0x0580| 10 00 00 00 | .... | cmdsize: 16 0x584-0x587.7 (4)
|
|
| | | linkedit_data{}: 0x588-0x58f.7 (8)
|
|
0x0580| 78 c0 00 00 | x... | off: 49272 0x588-0x58b.7 (4)
|
|
0x0580| 08 00 00 00| ....| size: 8 0x58c-0x58f.7 (4)
|
|
| | | [16]{}: load_command 0x590-0x59f.7 (16)
|
|
0x0590|29 00 00 00 |)... | cmd: "data_in_code" (41) 0x590-0x593.7 (4)
|
|
0x0590| 10 00 00 00 | .... | cmdsize: 16 0x594-0x597.7 (4)
|
|
| | | linkedit_data{}: 0x598-0x59f.7 (8)
|
|
0x0590| 80 c0 00 00 | .... | off: 49280 0x598-0x59b.7 (4)
|
|
0x0590| 00 00 00 00| ....| size: 0 0x59c-0x59f.7 (4)
|
|
| | | [17]{}: load_command 0x5a0-0x5af.7 (16)
|
|
0x05a0|1d 00 00 00 |.... | cmd: "code_signature" (29) 0x5a0-0x5a3.7 (4)
|
|
0x05a0| 10 00 00 00 | .... | cmdsize: 16 0x5a4-0x5a7.7 (4)
|
|
| | | linkedit_data{}: 0x5a8-0x5af.7 (8)
|
|
0x05a0| 40 c1 00 00 | @... | off: 49472 0x5a8-0x5ab.7 (4)
|
|
0x05a0| 18 02 00 00| ....| size: 536 0x5ac-0x5af.7 (4)
|
|
0x05b0|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................| unknown0: raw bits 0x5b0-0xc357.7 (48552)
|
|
* |until 0xc357.7 (end) (48552) | |
|