Jump to content

OS X 10.10 Mach-O File Format


Meowthra
 Share

1 post in this topic

Recommended Posts

1010.png

 

CA FE BA BE 00 00 00 03 01 00 00 07 00 00 00 03
00 00 10 00 00 1A B7 10 00 00 00 0C 00 00 00 07
00 00 00 03 00 1A D0 00 00 1A 2E 60 00 00 00 0C
01 00 00 07 00 00 00 08 00 35 00 00 00 1A 85 C0
00 00 00 0C 

header HEX:

CA FE BA BE 00 00 00 03

+00h  CA FE BA BE = mach_header  (dword)

+04h  files number  (dword)

 

file 1 HEX start 0x08h

file 2 HEX start 0x1ch

file 3 HEX start 0x30h

 

file 1 HEX

01 00 00 07 00 00 00 03 00 00 10 00 00 1A B7 10 00 00 00 0C
file 2 HEX
00 00 00 07 00 00 00 03 00 1A D0 00 00 1A 2E 60 00 00 00 0C
file 3 HEX
01 00 00 07 00 00 00 08 00 35 00 00 00 1A 85 C0 00 00 00 0C

+00h  01=64bit 00=32bit  (byte)

 

+03h  cputype 07=Intel X86 (byte)

 

+07h  cpusubtype 03=X86_ARCH1  08=X86_64_H (byte)

 

+08h  file load addr (dword)

 

+0ch  file size  (dword)

 

+10h  00 00 00 0C = NED  (dword)

 

  • Like 1
Link to comment
Share on other sites

 Share

×
×
  • Create New...