Meowthra Posted January 15, 2015 Share Posted January 15, 2015 CA FE BA BE 00 00 00 03 01 00 00 07 00 00 00 03 00 00 10 00 00 1A B7 10 00 00 00 0C 00 00 00 07 00 00 00 03 00 1A D0 00 00 1A 2E 60 00 00 00 0C 01 00 00 07 00 00 00 08 00 35 00 00 00 1A 85 C0 00 00 00 0C header HEX: CA FE BA BE 00 00 00 03 +00h CA FE BA BE = mach_header (dword) +04h files number (dword) file 1 HEX start 0x08h file 2 HEX start 0x1ch file 3 HEX start 0x30h file 1 HEX 01 00 00 07 00 00 00 03 00 00 10 00 00 1A B7 10 00 00 00 0C file 2 HEX 00 00 00 07 00 00 00 03 00 1A D0 00 00 1A 2E 60 00 00 00 0C file 3 HEX 01 00 00 07 00 00 00 08 00 35 00 00 00 1A 85 C0 00 00 00 0C +00h 01=64bit 00=32bit (byte) +03h cputype 07=Intel X86 (byte) +07h cpusubtype 03=X86_ARCH1 08=X86_64_H (byte) +08h file load addr (dword) +0ch file size (dword) +10h 00 00 00 0C = NED (dword) 1 Link to comment Share on other sites More sharing options...
Recommended Posts