A C Mach-O Header Dump tool was written for practicing purposes. Works With x86 and x86_64 binaries.
Didn't bother with Mach-O armv7 and AARCH64 nor with FAT files but will probably do in the future.
The program is written in 100% C so with some modifications you may be able to port it if needed. (You may wanna remove the macOS-specific system(clear); though).
To put it simply, the Mach-O binaries (assume here x86 and 64-Bit) have a Mach-O Header that you can find very well detailed on Apple's official source code. The file is called loader.h. Here is the loader.h file of the xnu-2050.18.24: https://opensource.apple.com/source/xnu/xnu-2050.18.24/EXTERNAL_HEADERS/mach-o/loader.h
Inside this file you can clearly see, very well put together the Mach-O header which without any bells and whistles looks pretty much like this:
struct mach_header {
uint32_t magic;
cpu_type_t cputype;
cpu_subtype_t cpusubtype;
uint32_t filetype;
uint32_t ncmds;
uint32_t sizeofcmds;
uint32_t flags;
};However, the FAT Mach-O binary is a bit different. The FAT Mach-O contains usually two different architectures inside. Mostly both 64-Bit and 32-Bit but if you have an older Mach-O it may as well contain a 32-Bit and a Power-PC variant from back when Apple used to use those. The FAT Mach-O has a different format and a different magic. The magic for FAT Mach-Os is 0xcafebabe.
struct fat_header {
unsigned long magic;
unsigned long nfat_arch; // The number of archs contained.
};
struct fat_arch {
cpu_type_t cputype;
cpu_subtype_t cpusubtype;
unsigned long offset;
unsigned long size;
unsigned long align;
};
The magic is quite important. We can easily identify if a file is a Mach-O Object file just by parsing the magic. Of course, Mach-O files are of a big variety, but as long as the magic checks out, you can proceed with trying to parse the rest of the header. If it doesn't, you can call the quits. Either the file header was mangled or the file itself is not Mach-O.
The magic can take various forms. Only 32-Bit Mach-O you will find out that the magic has the value 0xfeedface or 0xcefaedfeif swapped. On 64-Bit Mach-O the magic is either 0xfeedfacf or 0xcffaedfe if swapped. If you open a Mach-O binary in a HEX editor, you are likely to find out the swapped version.
Apart from the magic, the header also contains the cputype and cpusubtype which are self-explanatory. The ncmds is the number of load commands. After the header, you will find the Segment Command which on the XNU source code in the loader.h is looking like this:
struct segment_command {
uint32_t cmd;
uint32_t cmdsize;
char segname[16];
uint32_t vmaddr;
uint32_t vmsize;
uint32_t fileoff;
uint32_t filesize;
vm_prot_t maxprot;
vm_prot_t initprot;
uint32_t nsects;
uint32_t flags;
};Each segment in the Mach-O file has the afore-mentioned components. Most notably, a name, a memory address, a memory size, protection-related info, a count for the sections and flags.
The most common segments you will find in an executable Mach-O binary are:
__PAGEZERO ; This is the pagezero segment which has no protections and catches NULLs.
__TEXT ; Pretty much contains the entire code (in the __text section)
__DATA ; This contains the __data section which contains all the initialized data. If you initialize a variable, here it goes.
__bss ; This segment contains uninitialized data.
__LINKEDIT ; This segment containing all structs created and maintained by the link editor.
There are, indeed, more segments you may find, such as __OBJC which is the Objective-C runtime segment or __symbol_table which is the Symbol Table and so on, but those afore-mentioned are the principal segments.
In order to be able to get access to the Mach-O manipulation stuff, you need to import the following headers on macOS:
#include <mach-o/loader.h>
#include <mach-o/swap.h>
The entry offset of the file represents the offset of the main() function in a C program that is compiled as a Mach-O binary.
The following part of the loader.h header describes this structure in-depth:
/*
* The entry_point_command is a replacement for thread_command.
* It is used for main executables to specify the location (file offset)
* of main(). If -stack_size was used at link time, the stacksize
* field will contain the stack size need for the main thread.
*/
struct entry_point_command {
uint32_t cmd; /* LC_MAIN only used in MH_EXECUTE filetypes */
uint32_t cmdsize; /* 24 */
uint64_t entryoff; /* file (__TEXT) offset of main() */
uint64_t stacksize;/* if not zero, initial stack size */
};The header is self explanatory. If you parse the entryoff member of the entry_point_command structure, you can easily get the offset of the main() function. In my program I do this something like this:
if (command->cmd == LC_MAIN){
struct entry_point_command *entry = macho_loader(object_file, the_offset, sizeof(struct entry_point_command));
printf("[*] Found Main Entry Offset: 0x%llx\n",entry->entryoff); // We just print the entryoff member of the entry_point_command
free(entry); //Free the struct from the memory.
}As you can see, the code is pretty simple. We iterate through the ncommands and once we find LC_MAIN we build a new entry_point_command pointer structure and we feed in the object_file which is the binary loaded, the offset and the size.
After this, it is just a matter of printing the entryoff member of the entry_point_command which is of type uint64_t so we can use the 0x%llx format specifier for printf(). Of course, 0x is for cosmetic purposes to make it clear it is hexadecimal and the llx stands for unsigned long long int represented as hexadecimal by the x at the end.
To compile, run:
cd /folder where you have the source code
makeAlternatively, you can compile it yourself with gcc macho_dump.c -o MachDump
Add paths as needed.
MachDump v1.1 by GeoSn0w (@FCE365)
[i] Located Magic: 0xfeedface
[i] Swapped Magic: 0xcefaedfe
[*] Found Mach-O 32-Bit Object File
[*] Found CPU TYPE: 7
[*] Found CPU SUBTYPE: 3
[*] Found FLAGS: 0x01200085
[*] Found Size: 1044 bytes
===================================================================
[*] Found Segment: __PAGEZERO
[*] Found Segment Memory Address (vmaddr): 0x0000000000000000
[*] Found Segment Memory Size (vmsize): 0x0000000000001000
[*] Found 0 structures in the segment
===================================================================
[*] Found Segment: __TEXT
[*] Found Segment Memory Address (vmaddr): 0x0000000000001000
[*] Found Segment Memory Size (vmsize): 0x0000000000002000
[*] Found 5 structures in the segment
===================================================================
[*] Found Segment: __DATA
[*] Found Segment Memory Address (vmaddr): 0x0000000000003000
[*] Found Segment Memory Size (vmsize): 0x0000000000001000
[*] Found 2 structures in the segment
===================================================================
[*] Found Segment: __LINKEDIT
[*] Found Segment Memory Address (vmaddr): 0x0000000000004000
[*] Found Segment Memory Size (vmsize): 0x0000000000001000
[*] Found 0 structures in the segment
===================================================================
[*] Found Symbol Table at 0x31fc and it has 26 entries
[*] Found Main Entry Offset: 0x1140
[i] Beginning the HEX dump of Mach-O object file...
[*] 0000: ce fa ed fe 07 00 00 00 03 00 00 00 02 00 00 00 ????............
[*] 0010: 0f 00 00 00 14 04 00 00 85 00 20 01 01 00 00 00 ........?.......
[*] 0020: 38 00 00 00 5f 5f 50 41 47 45 5a 45 52 4f 00 00 8...__PAGEZERO..
[*] 0030: 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ................
[*] 0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0050: 00 00 00 00 01 00 00 00 8c 01 00 00 5f 5f 54 45 ........?...__TE
[*] 0060: 58 54 00 00 00 00 00 00 00 00 00 00 00 10 00 00 XT..............
[*] 0070: 00 20 00 00 00 00 00 00 00 20 00 00 07 00 00 00 ................
[*] 0080: 05 00 00 00 05 00 00 00 00 00 00 00 5f 5f 74 65 ............__te
[*] 0090: 78 74 00 00 00 00 00 00 00 00 00 00 5f 5f 54 45 xt..........__TE
[*] 00a0: 58 54 00 00 00 00 00 00 00 00 00 00 c0 20 00 00 XT..........?...
[*] 00b0: 46 0a 00 00 c0 10 00 00 04 00 00 00 00 00 00 00 F...?...........
[*] 00c0: 00 00 00 00 00 04 00 80 00 00 00 00 00 00 00 00 .......?........
[*] 00d0: 5f 5f 73 79 6d 62 6f 6c 5f 73 74 75 62 00 00 00 __symbol_stub...
[*] 00e0: 5f 5f 54 45 58 54 00 00 00 00 00 00 00 00 00 00 __TEXT..........
[*] 00f0: 06 2b 00 00 54 00 00 00 06 1b 00 00 01 00 00 00 .+..T...........
[*] 0100: 00 00 00 00 00 00 00 00 08 05 00 80 00 00 00 00 ...........?....
[*] 0110: 06 00 00 00 5f 5f 73 74 75 62 5f 68 65 6c 70 65 ....__stub_helpe
[*] 0120: 72 00 00 00 5f 5f 54 45 58 54 00 00 00 00 00 00 r...__TEXT......
[*] 0130: 00 00 00 00 5c 2b 00 00 98 00 00 00 5c 1b 00 00 ....\+..?...\...
[*] 0140: 02 00 00 00 00 00 00 00 00 00 00 00 00 05 00 80 ...............?
[*] 0150: 00 00 00 00 00 00 00 00 5f 5f 63 73 74 72 69 6e ........__cstrin
[*] 0160: 67 00 00 00 00 00 00 00 5f 5f 54 45 58 54 00 00 g.......__TEXT..
[*] 0170: 00 00 00 00 00 00 00 00 f4 2b 00 00 98 03 00 00 ........?+..?...
[*] 0180: f4 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ?...............
[*] 0190: 02 00 00 00 00 00 00 00 00 00 00 00 5f 5f 75 6e ............__un
[*] 01a0: 77 69 6e 64 5f 69 6e 66 6f 00 00 00 5f 5f 54 45 wind_info...__TE
[*] 01b0: 58 54 00 00 00 00 00 00 00 00 00 00 8c 2f 00 00 XT..........?/..
[*] 01c0: 6c 00 00 00 8c 1f 00 00 02 00 00 00 00 00 00 00 l...?...........
[*] 01d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 01e0: 01 00 00 00 c0 00 00 00 5f 5f 44 41 54 41 00 00 ....?...__DATA..
[*] 01f0: 00 00 00 00 00 00 00 00 00 30 00 00 00 10 00 00 .........0......
[*] 0200: 00 20 00 00 00 10 00 00 07 00 00 00 03 00 00 00 ................
[*] 0210: 02 00 00 00 00 00 00 00 5f 5f 6e 6c 5f 73 79 6d ........__nl_sym
[*] 0220: 62 6f 6c 5f 70 74 72 00 5f 5f 44 41 54 41 00 00 bol_ptr.__DATA..
[*] 0230: 00 00 00 00 00 00 00 00 00 30 00 00 08 00 00 00 .........0......
[*] 0240: 00 20 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0250: 06 00 00 00 0e 00 00 00 00 00 00 00 5f 5f 6c 61 ............__la
[*] 0260: 5f 73 79 6d 62 6f 6c 5f 70 74 72 00 5f 5f 44 41 _symbol_ptr.__DA
[*] 0270: 54 41 00 00 00 00 00 00 00 00 00 00 08 30 00 00 TA...........0..
[*] 0280: 38 00 00 00 08 20 00 00 02 00 00 00 00 00 00 00 8...............
[*] 0290: 00 00 00 00 07 00 00 00 10 00 00 00 00 00 00 00 ................
[*] 02a0: 01 00 00 00 38 00 00 00 5f 5f 4c 49 4e 4b 45 44 ....8...__LINKED
[*] 02b0: 49 54 00 00 00 00 00 00 00 40 00 00 00 10 00 00 IT.......@......
[*] 02c0: 00 30 00 00 10 05 00 00 07 00 00 00 01 00 00 00 .0..............
[*] 02d0: 00 00 00 00 00 00 00 00 22 00 00 80 30 00 00 00 ........"..?0...
[*] 02e0: 00 30 00 00 10 00 00 00 10 30 00 00 18 00 00 00 .0.......0......
[*] 02f0: 00 00 00 00 00 00 00 00 28 30 00 00 10 01 00 00 ........(0......
[*] 0300: 38 31 00 00 b0 00 00 00 02 00 00 00 18 00 00 00 81..?...........
[*] 0310: fc 31 00 00 1a 00 00 00 ac 33 00 00 64 01 00 00 ?1......?3..d...
[*] 0320: 0b 00 00 00 50 00 00 00 00 00 00 00 02 00 00 00 ....P...........
[*] 0330: 02 00 00 00 09 00 00 00 0b 00 00 00 0f 00 00 00 ................
[*] 0340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0350: 00 00 00 00 00 00 00 00 34 33 00 00 1e 00 00 00 ........43......
[*] 0360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0370: 0e 00 00 00 1c 00 00 00 0c 00 00 00 2f 75 73 72 ............/usr
[*] 0380: 2f 6c 69 62 2f 64 79 6c 64 00 00 00 1b 00 00 00 /lib/dyld.......
[*] 0390: 18 00 00 00 2e f2 cf 52 ce 59 3a 77 b9 2e 8f 32 .....??R?Y:w?.?2
[*] 03a0: bc 80 c1 90 24 00 00 00 10 00 00 00 00 0d 0a 00 ????$...........
[*] 03b0: 00 0d 0a 00 2a 00 00 00 10 00 00 00 00 00 00 00 ....*...........
[*] 03c0: 00 00 00 00 28 00 00 80 18 00 00 00 40 11 00 00 ....(..?....@...
[*] 03d0: 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 ................
[*] 03e0: 34 00 00 00 18 00 00 00 02 00 00 00 04 32 e4 04 4............2?.
[*] 03f0: 00 00 01 00 2f 75 73 72 2f 6c 69 62 2f 6c 69 62 ..../usr/lib/lib
[*] 0400: 53 79 73 74 65 6d 2e 42 2e 64 79 6c 69 62 00 00 System.B.dylib..
[*] 0410: 26 00 00 00 10 00 00 00 e8 31 00 00 14 00 00 00 &.......?1......
[*] 0420: 29 00 00 00 10 00 00 00 fc 31 00 00 00 00 00 00 ).......?1......
[*] 0430: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0450: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0460: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0470: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0490: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 04a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 04b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 04c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 04d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 04e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 04f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0510: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0520: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0530: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0550: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0570: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0590: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 05a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 05b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 05c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 05d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 05e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 05f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0650: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0660: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0670: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0690: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 06a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 06b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 06c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 06d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 06e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 06f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 07a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 07b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 07c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 07d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 07e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 07f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0810: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0820: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0830: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0850: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0860: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0890: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 08a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 08b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 08c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 08d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 08e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 08f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0970: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 09a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 09b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 09c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 09d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 09e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 09f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0a90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0aa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ab0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0af0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0b90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ba0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0bb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0bd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0be0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0bf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0c90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ca0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0cb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0cd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ce0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0cf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0d90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0da0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0db0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0dd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0de0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0df0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0e90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ea0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0eb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ed0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ef0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0f90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0fa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0fb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0fd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0fe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 0ff0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 1090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 10a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 10b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 10c0: 55 89 e5 83 ec 08 8b 45 08 b1 01 81 7d 08 cf fa U???.?E.?.?}.??
[*] 10d0: ed fe 89 45 fc 88 4d fb 0f 84 0d 00 00 00 81 7d ???E??M?.?....?}
[*] 10e0: 08 fe ed fa cf 0f 94 c0 88 45 fb 8a 45 fb 24 01 .????.???E??E?$.
[*] 10f0: 0f b6 c0 83 c4 08 5d c3 0f 1f 84 00 00 00 00 00 .????.]?..?.....
[*] 1100: 55 89 e5 83 ec 08 8b 45 08 b1 01 81 7d 08 fe ed U???.?E.?.?}.??
[*] 1110: fa ce 89 45 fc 88 4d fb 0f 84 0d 00 00 00 81 7d ?ΉE??M?.?....?}
[*] 1120: 08 fe ed fa cf 0f 94 c0 88 45 fb 8a 45 fb 24 01 .????.???E??E?$.
[*] 1130: 0f b6 c0 83 c4 08 5d c3 0f 1f 84 00 00 00 00 00 .????.]?..?.....
[*] 1140: 55 89 e5 56 83 ec 44 e8 00 00 00 00 58 8b 4d 0c U??V??D?....X?M.
[*] 1150: 8b 55 08 c7 45 f8 00 00 00 00 83 7d 08 02 89 45 ?U.?E?....?}..?E
[*] 1160: ec 89 4d e8 89 55 e4 0f 8d 45 00 00 00 8b 45 ec ?M?U?.?E...?E?
[*] 1170: 8d 88 a8 0a 00 00 89 0c 24 e8 b2 09 00 00 8b 4d ???...?.$?...?M
[*] 1180: ec 8d 91 f3 0a 00 00 8b 75 0c 8b 36 89 14 24 89 썑?...?u.?6?.$?
[*] 1190: 74 24 04 89 45 e0 e8 95 09 00 00 b9 01 00 00 00 t$.?E??...?....
[*] 11a0: c7 04 24 01 00 00 00 89 45 dc 89 4d d8 e8 5a 09 ?.$....?E܉M??Z.
[*] 11b0: 00 00 83 7d 08 02 0f 85 5d 00 00 00 8b 45 ec 8d ..?}...?]...?E?
[*] 11c0: 88 23 0b 00 00 8b 55 0c 8b 52 04 89 55 f4 8b 55 ?#...?U.?R.?U?U
[*] 11d0: f4 89 14 24 89 4c 24 04 e8 3b 09 00 00 8b 4d ec ?.$?L$.?;...?M?
[*] 11e0: 8d 91 26 0b 00 00 89 45 f0 89 14 24 e8 63 09 00 ??&...?E??.$?c..
[*] 11f0: 00 8b 4d f0 89 0c 24 89 45 d4 e8 71 00 00 00 8b .?M??.$?E??q...?
[*] 1200: 45 f0 89 04 24 e8 08 09 00 00 c7 45 f8 00 00 00 E??.$?....?E?...
[*] 1210: 00 89 45 d0 e9 45 00 00 00 83 7d 08 02 0f 8e 31 .?E??E...?}...?1
[*] 1220: 00 00 00 8b 45 ec 8d 88 2c 0b 00 00 8b 55 0c 8b ...?E썈,...?U.?
[*] 1230: 12 89 0c 24 89 54 24 04 e8 f3 08 00 00 b9 01 00 .?.$?T$.??...?..
[*] 1240: 00 00 c7 04 24 01 00 00 00 89 45 cc 89 4d c8 e8 ..?.$....?ẺM??
[*] 1250: b8 08 00 00 e9 00 00 00 00 e9 00 00 00 00 8b 45 ?...?....?....?E
[*] 1260: f8 83 c4 44 5e 5d c3 66 0f 1f 84 00 00 00 00 00 ???D^]?f..?.....
[*] 1270: 55 89 e5 56 83 ec 34 8b 45 08 31 c9 8b 55 08 89 U??V??4?E.1ɋU.?
[*] 1280: 14 24 c7 44 24 04 00 00 00 00 89 45 ec 89 4d e8 .$?D$.....?E?M?
[*] 1290: e8 eb 00 00 00 89 45 f8 8b 45 f8 89 04 24 e8 1d ??...?E??E??.$?.
[*] 12a0: fe ff ff 89 45 f4 8b 45 f8 89 04 24 e8 4f fe ff ????E?E??.$?O??
[*] 12b0: ff 31 c9 89 45 f0 8b 45 08 8b 55 f4 8b 75 f0 89 ?1ɉE??E.?U?u??
[*] 12c0: 04 24 c7 44 24 04 00 00 00 00 89 54 24 08 89 74 .$?D$.....?T$.?t
[*] 12d0: 24 0c 89 4d e4 e8 86 01 00 00 83 c4 34 5e 5d c3 $.?M??...??4^]?
[*] 12e0: 55 89 e5 57 56 83 ec 40 8b 45 10 8b 4d 0c 8b 55 U??WV??@?E.?M.?U
[*] 12f0: 08 be 01 00 00 00 8b 7d 10 c7 04 24 01 00 00 00 .?....?}.?.$....
[*] 1300: 89 7c 24 04 89 45 f0 89 4d ec 89 55 e8 89 75 e4 ?|$.?E??M?U?u?
[*] 1310: e8 f1 07 00 00 31 c9 89 45 f4 8b 45 08 8b 55 0c ??...1ɉE?E.?U.
[*] 1320: 89 04 24 89 54 24 04 c7 44 24 08 00 00 00 00 89 ?.$?T$.?D$.....?
[*] 1330: 4d e0 e8 f3 07 00 00 b9 01 00 00 00 8b 55 f4 8b M???...?....?U?
[*] 1340: 75 10 8b 7d 08 89 14 24 89 74 24 04 c7 44 24 08 u.?}.?.$?t$.?D$.
[*] 1350: 01 00 00 00 89 7c 24 0c 89 45 dc 89 4d d8 e8 bb ....?|$.?E܉M??
[*] 1360: 07 00 00 8b 4d f4 89 45 d4 89 c8 83 c4 40 5e 5f ...?M?Eԉȃ?@^_
[*] 1370: 5d c3 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 ]?fffff...?.....
[*] 1380: 55 89 e5 53 57 56 83 ec 3c e8 00 00 00 00 58 8b U??SWV??<?....X?
[*] 1390: 4d 0c 8b 55 08 31 f6 8b 7d 08 8b 5d 0c 89 3c 24 M.?U.1??}.?].?<$
[*] 13a0: 89 5c 24 04 c7 44 24 08 00 00 00 00 89 45 ec 89 ?\$.?D$.....?E?
[*] 13b0: 4d e8 89 55 e4 89 75 e0 e8 6d 07 00 00 b9 04 00 M?U?u??m...?..
[*] 13c0: 00 00 ba 01 00 00 00 8d 75 f0 8b 7d 08 89 34 24 ..?....?u??}.?4$
[*] 13d0: c7 44 24 04 04 00 00 00 c7 44 24 08 01 00 00 00 ?D$.....?D$.....
[*] 13e0: 89 7c 24 0c 89 45 dc 89 4d d8 89 55 d4 e8 2c 07 ?|$.?E܉M؉U??,.
[*] 13f0: 00 00 8b 4d f0 8b 55 f0 89 14 24 89 45 d0 89 4d ..?M??U??.$?EЉM
[*] 1400: cc e8 3a 00 00 00 8b 4d ec 8d 91 2e 09 00 00 89 ??:...?M썑....?
[*] 1410: 14 24 8b 55 cc 89 54 24 04 89 44 24 08 e8 0e 07 .$?ỦT$.?D$.?..
[*] 1420: 00 00 8b 4d f0 89 45 c8 89 c8 83 c4 3c 5e 5f 5b ..?M??Eȉȃ?<^_[
[*] 1430: 5d c3 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 ]?fffff...?.....
[*] 1440: 55 89 e5 83 ec 08 8b 45 08 8b 4d 08 89 0c 24 89 U???.?E.?M.?.$?
[*] 1450: 45 fc e8 99 06 00 00 83 c4 08 5d c3 0f 1f 40 00 E??...??.]?..@.
[*] 1460: 55 89 e5 53 57 56 83 ec 7c e8 00 00 00 00 58 8b U??SWV??|?....X?
[*] 1470: 4d 14 8b 55 10 8b 75 0c 8b 7d 08 8b 5d 0c 89 5d M.?U.?u.?}.?].?]
[*] 1480: ec 83 7d 10 00 89 45 d8 89 4d d4 89 55 d0 89 75 ?}..?E؉MԉUЉu
[*] 1490: cc 89 7d c8 0f 84 07 01 00 00 c7 45 e8 20 00 00 ̉}?.?....?E?...
[*] 14a0: 00 8b 45 08 8b 4d 0c 8b 55 e8 89 04 24 89 4c 24 .?E.?M.?U?.$?L$
[*] 14b0: 04 89 54 24 08 e8 26 fe ff ff 89 45 e4 83 7d 14 .?T$.?&????E?}.
[*] 14c0: 00 0f 84 18 00 00 00 31 c0 8b 4d e4 89 0c 24 c7 ..?....1??M?.$?
[*] 14d0: 44 24 04 00 00 00 00 89 45 c4 e8 63 06 00 00 8b D$.....?E??c...?
[*] 14e0: 45 d8 8d 88 9b 08 00 00 8b 55 e4 8b 52 10 89 55 E؍??...?U?R.?U
[*] 14f0: f0 89 0c 24 e8 37 06 00 00 8b 4d d8 8d 91 c0 08 ??.$?7...?M؍??.
[*] 1500: 00 00 8b 75 e4 8b 76 04 89 14 24 89 74 24 04 89 ..?u?v.?.$?t$.?
[*] 1510: 45 c0 e8 19 06 00 00 8b 4d d8 8d 91 dc 08 00 00 E??....?M؍??...
[*] 1520: 8b 75 e4 8b 76 08 89 14 24 89 74 24 04 89 45 bc ?u?v.?.$?t$.?E?
[*] 1530: e8 fb 05 00 00 8b 4d d8 8d 91 fb 08 00 00 8b 75 ??...?M؍??...?u
[*] 1540: e4 8b 76 18 89 14 24 89 74 24 04 89 45 b8 e8 dd ?v.?.$?t$.?E???
[*] 1550: 05 00 00 8b 4d d8 8d 91 13 09 00 00 8b 75 e4 8b ...?M؍?....?u?
[*] 1560: 76 14 89 14 24 89 74 24 04 89 45 b4 e8 bf 05 00 v.?.$?t$.?E??..
[*] 1570: 00 8b 4d d8 8d 91 2d 09 00 00 89 14 24 89 45 b0 .?M؍?-...?.$?E?
[*] 1580: e8 ab 05 00 00 8b 4d e8 03 4d ec 89 4d ec 8b 4d ?...?M?.M?M?M
[*] 1590: e4 89 0c 24 89 45 ac e8 88 05 00 00 e9 02 01 00 ?.$?E??...?...
[*] 15a0: 00 c7 45 e0 1c 00 00 00 8b 45 08 8b 4d 0c 8b 55 .?E?....?E.?M.?U
[*] 15b0: e0 89 04 24 89 4c 24 04 89 54 24 08 e8 1f fd ff ??.$?L$.?T$.?.??
[*] 15c0: ff 89 45 dc 83 7d 14 00 0f 84 18 00 00 00 31 c0 ??E܃}...?....1?
[*] 15d0: 8b 4d dc 89 0c 24 c7 44 24 04 00 00 00 00 89 45 ?M܉.$?D$.....?E
[*] 15e0: a8 e8 56 05 00 00 8b 45 d8 8d 88 5e 09 00 00 8b ??V...?E؍?^...?
[*] 15f0: 55 dc 8b 52 10 89 55 f0 89 0c 24 e8 30 05 00 00 U܋R.?U??.$?0...
[*] 1600: 8b 4d d8 8d 91 83 09 00 00 8b 75 dc 8b 76 04 89 ?M؍??...?u܋v.?
[*] 1610: 14 24 89 74 24 04 89 45 a4 e8 12 05 00 00 8b 4d .$?t$.?E??....?M
[*] 1620: d8 8d 91 9b 09 00 00 8b 75 dc 8b 76 08 89 14 24 ؍??...?u܋v.?.$
[*] 1630: 89 74 24 04 89 45 a0 e8 f4 04 00 00 8b 4d d8 8d ?t$.?E???...?M؍
[*] 1640: 91 fb 08 00 00 8b 75 dc 8b 76 18 89 14 24 89 74 ??...?u܋v.?.$?t
[*] 1650: 24 04 89 45 9c e8 d6 04 00 00 8b 4d d8 8d 91 13 $.?E???...?M؍?.
[*] 1660: 09 00 00 8b 75 dc 8b 76 14 89 14 24 89 74 24 04 ...?u܋v.?.$?t$.
[*] 1670: 89 45 98 e8 b8 04 00 00 8b 4d d8 8d 91 2d 09 00 ?E??...?M؍?-..
[*] 1680: 00 89 14 24 89 45 94 e8 a4 04 00 00 8b 4d e0 03 .?.$?E??...?M?.
[*] 1690: 4d ec 89 4d ec 8b 4d dc 89 0c 24 89 45 90 e8 81 M?M?M܉.$?E??
[*] 16a0: 04 00 00 8b 45 08 8b 4d ec 8b 55 14 8b 75 f0 89 ...?E.?M?U.?u??
[*] 16b0: 04 24 89 4c 24 04 89 54 24 08 89 74 24 0c e8 0d .$?L$.?T$.?t$.?.
[*] 16c0: 00 00 00 83 c4 7c 5e 5f 5b 5d c3 0f 1f 44 00 00 ...??|^_[]?..D..
[*] 16d0: 55 89 e5 53 57 56 81 ec 9c 00 00 00 e8 00 00 00 U??SWV??...?...
[*] 16e0: 00 58 8b 4d 14 8b 55 10 8b 75 0c 8b 7d 08 8b 5d .X?M.?U.?u.?}.?]
[*] 16f0: 0c 89 5d f0 c7 45 ec 00 00 00 00 89 45 d0 89 4d .?]??E?....?EЉM
[*] 1700: cc 89 55 c8 89 75 c4 89 7d c0 8b 45 ec 3b 45 14 ̉Uȉuĉ}??E?;E.
[*] 1710: 0f 83 c0 03 00 00 b8 08 00 00 00 8b 4d 08 8b 55 .??...?....?M.?U
[*] 1720: f0 89 0c 24 89 54 24 04 c7 44 24 08 08 00 00 00 ??.$?T$.?D$.....
[*] 1730: 89 45 bc e8 a8 fb ff ff 89 45 e8 83 7d 10 00 0f ?E??????E?}...
[*] 1740: 84 18 00 00 00 31 c0 8b 4d e8 89 0c 24 c7 44 24 ?....1??M?.$?D$
[*] 1750: 04 00 00 00 00 89 45 b8 e8 d9 03 00 00 8b 45 e8 .....?E???...?E?
[*] 1760: 83 38 19 0f 85 f8 00 00 00 b8 48 00 00 00 8b 4d ?8..??...?H...?M
[*] 1770: 08 8b 55 f0 89 0c 24 89 54 24 04 c7 44 24 08 48 .?U??.$?T$.?D$.H
[*] 1780: 00 00 00 89 45 b4 e8 55 fb ff ff 89 45 e4 83 7d ...?E??U????E?}
[*] 1790: 10 00 0f 84 18 00 00 00 31 c0 8b 4d e4 89 0c 24 ...?....1??M?.$
[*] 17a0: c7 44 24 04 00 00 00 00 89 45 b0 e8 9e 03 00 00 ?D$.....?E??...
[*] 17b0: 8b 45 d0 8d 88 90 07 00 00 8b 55 e4 83 c2 08 89 ?EЍ??...?U??.?
[*] 17c0: e6 89 56 04 8d 90 43 07 00 00 89 16 89 4d ac e8 ?V.??C...?.?M??
[*] 17d0: 5c 03 00 00 8b 4d e4 8b 51 18 8b 49 1c 89 e6 89 \...?M?Q.?I.??
[*] 17e0: 4e 08 89 56 04 8b 4d d0 8d 91 5a 07 00 00 89 16 N.?V.?MЍ?Z...?.
[*] 17f0: 89 45 a8 e8 38 03 00 00 8b 4d e4 8b 51 20 8b 49 ?E??8...?M?Q.?I
[*] 1800: 24 89 e6 89 4e 08 89 56 04 8b 4d d0 8d 91 90 07 $??N.?V.?MЍ??.
[*] 1810: 00 00 89 16 89 45 a4 e8 14 03 00 00 8b 4d d0 8d ..?.?E??....?MЍ
[*] 1820: 91 c3 07 00 00 8b 75 e4 8b 76 40 89 14 24 89 74 ??...?u?v@?.$?t
[*] 1830: 24 04 89 45 a0 e8 f6 02 00 00 8b 4d d0 8d 91 ba $.?E???...?MЍ??
[*] 1840: 06 00 00 89 14 24 89 45 9c e8 e2 02 00 00 8b 4d ...?.$?E???...?M
[*] 1850: e4 89 0c 24 89 45 98 e8 c8 02 00 00 e9 50 02 00 ?.$?E???...?P..
[*] 1860: 00 8b 45 e8 83 38 01 0f 85 e6 00 00 00 b8 38 00 .?E?8..??...?8.
[*] 1870: 00 00 8b 4d 08 8b 55 f0 89 0c 24 89 54 24 04 c7 ..?M.?U??.$?T$.?
[*] 1880: 44 24 08 38 00 00 00 89 45 94 e8 51 fa ff ff 89 D$.8...?E??Q????
[*] 1890: 45 e0 83 7d 10 00 0f 84 18 00 00 00 31 c0 8b 4d E??}...?....1??M
[*] 18a0: e0 89 0c 24 c7 44 24 04 00 00 00 00 89 45 90 e8 ??.$?D$.....?E??
[*] 18b0: 94 02 00 00 8b 45 d0 8d 88 43 07 00 00 8b 55 e0 ?...?EЍ?C...?U?
[*] 18c0: 83 c2 08 89 0c 24 89 54 24 04 e8 61 02 00 00 8b ??.?.$?T$.?a...?
[*] 18d0: 4d d0 8d 91 eb 07 00 00 8b 75 e0 8b 76 18 89 14 MЍ??...?u??v.?.
[*] 18e0: 24 89 74 24 04 89 45 8c e8 43 02 00 00 8b 4d d0 $?t$.?E??C...?M?
[*] 18f0: 8d 91 1f 08 00 00 8b 75 e0 8b 76 1c 89 14 24 89 ??....?u??v.?.$?
[*] 1900: 74 24 04 89 45 88 e8 25 02 00 00 8b 4d d0 8d 91 t$.?E??%...?MЍ?
[*] 1910: c3 07 00 00 8b 75 e0 8b 76 30 89 14 24 89 74 24 ?...?u??v0?.$?t$
[*] 1920: 04 89 45 84 e8 07 02 00 00 8b 4d d0 8d 91 ba 06 .?E??....?MЍ??.
[*] 1930: 00 00 89 14 24 89 45 80 e8 f3 01 00 00 8b 4d e0 ..?.$?E???...?M?
[*] 1940: 89 0c 24 89 85 7c ff ff ff e8 d6 01 00 00 e9 59 ?.$??|?????...?Y
[*] 1950: 01 00 00 8b 45 e8 81 38 28 00 00 80 0f 85 62 00 ...?E?8(..?.?b.
[*] 1960: 00 00 8b 45 d0 8d 88 50 08 00 00 8b 55 08 8b 75 ..?EЍ?P...?U.?u
[*] 1970: f0 89 e7 89 77 04 89 17 c7 47 08 18 00 00 00 89 ???w.?.?G.....?
[*] 1980: 8d 78 ff ff ff e8 56 f9 ff ff 89 45 dc 8b 45 dc ?x????V????E܋E?
[*] 1990: 8b 48 08 8b 40 0c 89 e2 89 42 08 89 4a 04 8b 45 ?H.?@.??B.?J.?E
[*] 19a0: d0 8d 88 50 08 00 00 89 0a e8 82 01 00 00 8b 4d Ѝ?P...?.?...?M
[*] 19b0: dc 89 0c 24 89 85 74 ff ff ff e8 65 01 00 00 e9 ܉.$??t????e...?
[*] 19c0: e3 00 00 00 8b 45 e8 83 38 02 0f 85 63 00 00 00 ?...?E?8..?c...
[*] 19d0: b8 18 00 00 00 8b 4d 08 8b 55 f0 89 0c 24 89 54 ?....?M.?U??.$?T
[*] 19e0: 24 04 c7 44 24 08 18 00 00 00 89 85 70 ff ff ff $.?D$.....??p???
[*] 19f0: e8 eb f8 ff ff 8b 4d d0 8d 91 75 08 00 00 89 45 ??????MЍ?u...?E
[*] 1a00: d8 8b 45 d8 8b 40 08 8b 75 d8 8b 76 0c 89 14 24 ؋E؋@.?u؋v.?.$
[*] 1a10: 89 44 24 04 89 74 24 08 e8 13 01 00 00 8b 4d d8 ?D$.?t$.?....?M?
[*] 1a20: 89 0c 24 89 85 6c ff ff ff e8 f6 00 00 00 e9 6f ?.$??l?????...?o
[*] 1a30: 00 00 00 8b 45 e8 83 38 02 0f 85 5e 00 00 00 b8 ...?E?8..?^...?
[*] 1a40: 18 00 00 00 8b 4d 08 8b 55 f0 89 0c 24 89 54 24 ....?M.?U??.$?T$
[*] 1a50: 04 c7 44 24 08 18 00 00 00 89 85 68 ff ff ff e8 .?D$.....??h????
[*] 1a60: 7c f8 ff ff 8b 4d d0 8d 91 75 08 00 00 89 45 d4 |????MЍ?u...?E?
[*] 1a70: 8b 45 d4 8b 40 08 8b 75 d4 8b 76 0c 89 14 24 89 ?Eԋ@.?uԋv.?.$?
[*] 1a80: 44 24 04 89 74 24 08 e8 a4 00 00 00 8b 4d d4 89 D$.?t$.?...?Mԉ
[*] 1a90: 0c 24 89 85 64 ff ff ff e8 87 00 00 00 e9 00 00 .$??d????...?..
[*] 1aa0: 00 00 e9 00 00 00 00 e9 00 00 00 00 e9 00 00 00 ..?....?....?...
[*] 1ab0: 00 8b 45 e8 8b 40 04 03 45 f0 89 45 f0 8b 45 e8 [email protected]??E??E?
[*] 1ac0: 89 04 24 e8 5c 00 00 00 8b 45 ec 83 c0 01 89 45 ?.$?\...?E??.?E
[*] 1ad0: ec e9 34 fc ff ff 81 c4 9c 00 00 00 5e 5f 5b 5d ??4????Ĝ...^_[]
[*] 1ae0: c3 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 ?ffffff...?.....
[*] 1af0: 55 89 e5 50 8b 45 08 8b 4d 08 0f c9 89 45 fc 89 U??P?E.?M..ɉE??
[*] 1b00: c8 83 c4 04 5d c3 ff 25 08 30 00 00 ff 25 0c 30 ȃ?.]??%.0..?%.0
[*] 1b10: 00 00 ff 25 10 30 00 00 ff 25 14 30 00 00 ff 25 ..?%.0..?%.0..?%
[*] 1b20: 18 30 00 00 ff 25 1c 30 00 00 ff 25 20 30 00 00 .0..?%.0..?%.0..
[*] 1b30: ff 25 24 30 00 00 ff 25 28 30 00 00 ff 25 2c 30 ?%$0..?%(0..?%,0
[*] 1b40: 00 00 ff 25 30 30 00 00 ff 25 34 30 00 00 ff 25 ..?%00..?%40..?%
[*] 1b50: 38 30 00 00 ff 25 3c 30 00 00 00 00 68 04 30 00 80..?%<0....h.0.
[*] 1b60: 00 ff 25 00 30 00 00 90 68 00 00 00 00 e9 ea ff .?%.0..?h....???
[*] 1b70: ff ff 68 0e 00 00 00 e9 e0 ff ff ff 68 1a 00 00 ??h....?????h...
[*] 1b80: 00 e9 d6 ff ff ff 68 28 00 00 00 e9 cc ff ff ff .?????h(...?????
[*] 1b90: 68 3e 00 00 00 e9 c2 ff ff ff 68 4b 00 00 00 e9 h>...?????hK...?
[*] 1ba0: b8 ff ff ff 68 57 00 00 00 e9 ae ff ff ff 68 64 ????hW...????hd
[*] 1bb0: 00 00 00 e9 a4 ff ff ff 68 72 00 00 00 e9 9a ff ...????hr...??
[*] 1bc0: ff ff 68 8b 00 00 00 e9 90 ff ff ff 68 a3 00 00 ??h?...????h?..
[*] 1bd0: 00 e9 86 ff ff ff 68 be 00 00 00 e9 7c ff ff ff .????h?...?|???
[*] 1be0: 68 da 00 00 00 e9 72 ff ff ff 68 f9 00 00 00 e9 h?...?r???h?...?
[*] 1bf0: 68 ff ff ff 0a 5b 21 5d 20 4e 6f 74 20 66 65 65 h???.[!].Not.fee
[*] 1c00: 64 69 6e 67 20 6d 65 20 61 6e 79 20 4d 61 63 68 ding.me.any.Mach
[*] 1c10: 2d 4f 20 66 69 6c 65 3f 20 49 74 27 73 20 6f 6b -O.file?.It's.ok
[*] 1c20: 2e 20 49 20 63 61 6e 20 66 69 6e 64 20 74 68 65 ..I.can.find.the
[*] 1c30: 20 65 78 69 74 20 6d 79 73 65 6c 66 2e 0a 00 55 .exit.myself...U
[*] 1c40: 73 61 67 65 3a 20 25 73 20 3c 6d 61 63 68 2d 6f sage:.%s.<mach-o
[*] 1c50: 20 33 32 2f 36 34 2d 62 69 74 20 62 69 6e 61 72 .32/64-bit.binar
[*] 1c60: 79 20 66 69 6c 65 20 70 61 74 68 3e 0a 0a 00 72 y.file.path>...r
[*] 1c70: 62 00 63 6c 65 61 72 00 0a 54 6f 6f 20 6d 61 6e b.clear..Too.man
[*] 1c80: 79 20 63 6f 6d 6d 61 6e 64 73 21 0a 55 73 61 67 y.commands!.Usag
[*] 1c90: 65 3a 20 25 73 20 3c 6d 61 63 68 2d 6f 20 33 32 e:.%s.<mach-o.32
[*] 1ca0: 2f 36 34 2d 62 69 74 20 62 69 6e 61 72 79 20 66 /64-bit.binary.f
[*] 1cb0: 69 6c 65 20 70 61 74 68 3e 0a 0a 00 4d 61 63 68 ile.path>...Mach
[*] 1cc0: 44 75 6d 70 20 76 31 2e 30 20 62 79 20 47 65 6f Dump.v1.0.by.Geo
[*] 1cd0: 53 6e 30 77 20 28 40 46 43 45 33 36 35 29 0a 0a Sn0w.(@FCE365)..
[*] 1ce0: 4c 6f 63 61 74 65 64 20 4d 61 67 69 63 3a 20 30 Located.Magic:.0
[*] 1cf0: 78 25 78 0a 53 77 61 70 70 65 64 20 4d 61 67 69 x%x.Swapped.Magi
[*] 1d00: 63 3a 20 30 78 25 78 0a 00 5b 2a 5d 20 46 6f 75 c:.0x%x..[*].Fou
[*] 1d10: 6e 64 20 4d 61 63 68 2d 4f 20 36 34 2d 42 69 74 nd.Mach-O.64-Bit
[*] 1d20: 20 4f 62 6a 65 63 74 20 46 69 6c 65 0a 00 5b 2a .Object.File..[*
[*] 1d30: 5d 20 46 6f 75 6e 64 20 43 50 55 20 54 59 50 45 ].Found.CPU.TYPE
[*] 1d40: 3a 20 30 78 25 2e 32 78 0a 00 5b 2a 5d 20 46 6f :.0x%.2x..[*].Fo
[*] 1d50: 75 6e 64 20 43 50 55 20 53 55 42 54 59 50 45 3a und.CPU.SUBTYPE:
[*] 1d60: 20 30 78 25 2e 32 78 0a 00 5b 2a 5d 20 46 6f 75 .0x%.2x..[*].Fou
[*] 1d70: 6e 64 20 46 4c 41 47 53 3a 20 30 78 30 25 78 0a nd.FLAGS:.0x0%x.
[*] 1d80: 00 5b 2a 5d 20 46 6f 75 6e 64 20 53 69 7a 65 3a .[*].Found.Size:
[*] 1d90: 20 25 64 20 62 79 74 65 73 0a 00 3d 3d 3d 3d 3d .%d.bytes..=====
[*] 1da0: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d ================
[*] 1db0: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d ================
[*] 1dc0: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 00 5b 2a 5d 20 ==========..[*].
[*] 1dd0: 46 6f 75 6e 64 20 4d 61 63 68 2d 4f 20 33 32 2d Found.Mach-O.32-
[*] 1de0: 42 69 74 20 4f 62 6a 65 63 74 20 46 69 6c 65 0a Bit.Object.File.
[*] 1df0: 00 5b 2a 5d 20 46 6f 75 6e 64 20 43 50 55 20 54 .[*].Found.CPU.T
[*] 1e00: 59 50 45 3a 20 25 64 0a 00 5b 2a 5d 20 46 6f 75 YPE:.%d..[*].Fou
[*] 1e10: 6e 64 20 43 50 55 20 53 55 42 54 59 50 45 3a 20 nd.CPU.SUBTYPE:.
[*] 1e20: 25 64 0a 00 5b 2a 5d 20 46 6f 75 6e 64 20 53 65 %d..[*].Found.Se
[*] 1e30: 67 6d 65 6e 74 3a 20 25 73 0a 00 5b 2a 5d 20 46 gment:.%s..[*].F
[*] 1e40: 6f 75 6e 64 20 53 65 67 6d 65 6e 74 20 4d 65 6d ound.Segment.Mem
[*] 1e50: 6f 72 79 20 41 64 64 72 65 73 73 20 28 76 6d 61 ory.Address.(vma
[*] 1e60: 64 64 72 29 3a 20 30 78 25 30 31 36 6c 6c 78 0a ddr):.0x%016llx.
[*] 1e70: 00 5b 2a 5d 20 46 6f 75 6e 64 20 53 65 67 6d 65 .[*].Found.Segme
[*] 1e80: 6e 74 20 4d 65 6d 6f 72 79 20 53 69 7a 65 20 28 nt.Memory.Size.(
[*] 1e90: 76 6d 73 69 7a 65 29 3a 20 30 78 25 30 31 36 6c vmsize):.0x%016l
[*] 1ea0: 6c 78 0a 00 5b 2a 5d 20 46 6f 75 6e 64 20 25 75 lx..[*].Found.%u
[*] 1eb0: 20 73 74 72 75 63 74 75 72 65 73 20 69 6e 20 74 .structures.in.t
[*] 1ec0: 68 65 20 73 65 67 6d 65 6e 74 0a 00 5b 2a 5d 20 he.segment..[*].
[*] 1ed0: 46 6f 75 6e 64 20 53 65 67 6d 65 6e 74 20 4d 65 Found.Segment.Me
[*] 1ee0: 6d 6f 72 79 20 41 64 64 72 65 73 73 20 28 76 6d mory.Address.(vm
[*] 1ef0: 61 64 64 72 29 3a 20 30 78 25 30 31 36 78 0a 00 addr):.0x%016x..
[*] 1f00: 5b 2a 5d 20 46 6f 75 6e 64 20 53 65 67 6d 65 6e [*].Found.Segmen
[*] 1f10: 74 20 4d 65 6d 6f 72 79 20 53 69 7a 65 20 28 76 t.Memory.Size.(v
[*] 1f20: 6d 73 69 7a 65 29 3a 20 30 78 25 30 31 36 78 0a msize):.0x%016x.
[*] 1f30: 00 5b 2a 5d 20 46 6f 75 6e 64 20 4d 61 69 6e 20 .[*].Found.Main.
[*] 1f40: 45 6e 74 72 79 20 4f 66 66 73 65 74 3a 20 30 78 Entry.Offset:.0x
[*] 1f50: 25 6c 6c 78 0a 00 5b 2a 5d 20 46 6f 75 6e 64 20 %llx..[*].Found.
[*] 1f60: 53 79 6d 62 6f 6c 20 54 61 62 6c 65 20 61 74 20 Symbol.Table.at.
[*] 1f70: 30 78 25 78 20 61 6e 64 20 69 74 20 68 61 73 20 0x%x.and.it.has.
[*] 1f80: 25 64 20 65 6e 74 72 69 65 73 0a 00 01 00 00 00 %d.entries......
[*] 1f90: 1c 00 00 00 02 00 00 00 24 00 00 00 00 00 00 00 ........$.......
[*] 1fa0: 24 00 00 00 02 00 00 00 00 00 00 01 65 00 03 01 $...........e...
[*] 1fb0: c0 10 00 00 3c 00 00 00 3c 00 00 00 07 1b 00 00 ?...<...<.......
[*] 1fc0: 00 00 00 00 3c 00 00 00 03 00 00 00 0c 00 07 00 ....<...........
[*] 1fd0: 28 00 02 00 00 00 00 00 80 00 00 03 20 02 00 02 (.......?.......
[*] 1fe0: c0 02 00 01 80 03 00 00 a0 03 00 01 30 0a 00 00 ?...?...?...0...
[*] 1ff0: 25 00 02 01 05 00 01 01 00 00 00 00 00 00 00 00 %...............
[*] 2000: 00 00 00 00 00 00 00 00 68 2b 00 00 72 2b 00 00 ........h+..r+..
[*] 2010: 7c 2b 00 00 86 2b 00 00 90 2b 00 00 9a 2b 00 00 |+..?+..?+..?+..
[*] 2020: a4 2b 00 00 ae 2b 00 00 b8 2b 00 00 c2 2b 00 00 ?+..?+..?+..?+..
[*] 2030: cc 2b 00 00 d6 2b 00 00 e0 2b 00 00 ea 2b 00 00 ?+..?+..?+..?+..
[*] 2040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 20a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 20b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 20c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 20d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 20e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 20f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 21a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 21b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 21c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 21d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 21e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 21f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2210: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2220: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2230: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2250: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2260: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2270: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2290: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 22a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 22b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 22c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 22d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 22e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 22f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2310: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2320: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2330: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2350: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2370: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 23a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 23b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 23c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 23d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 23e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 23f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2410: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2420: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2430: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2450: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2460: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2470: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2490: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 24a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 24b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 24c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 24d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 24e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 24f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2510: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2520: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2530: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2550: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2570: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2590: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 25a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 25b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 25c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 25d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 25e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 25f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2650: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2660: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2670: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2690: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 26a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 26b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 26c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 26d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 26e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 26f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 27a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 27b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 27c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 27d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 27e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 27f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2810: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2820: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2830: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2850: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2860: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2890: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 28a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 28b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 28c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 28d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 28e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 28f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2970: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 29a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 29b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 29c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 29d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 29e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 29f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2a90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2aa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ab0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2af0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2b90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ba0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2bb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2bc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2bd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2be0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2bf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2c90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ca0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2cb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2cd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ce0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2cf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2d90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2da0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2db0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2dc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2dd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2de0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2df0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2e90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ea0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2eb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ed0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ef0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2f90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2fa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2fb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2fc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2fd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2fe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 2ff0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[*] 3000: 11 22 08 5e 12 21 88 36 80 0d 02 70 03 70 02 51 .".^.!?6?..p.p.Q
[*] 3010: 11 40 64 79 6c 64 5f 73 74 75 62 5f 62 69 6e 64 .@dyld_stub_bind
[*] 3020: 65 72 00 51 72 00 90 00 72 08 11 40 5f 63 61 6c er.Qr.?.r..@_cal
[*] 3030: 6c 6f 63 00 90 00 72 0c 11 40 5f 65 78 69 74 00 loc.?.r..@_exit.
[*] 3040: 90 00 72 10 11 40 5f 66 63 6c 6f 73 65 00 90 00 ?.r..@_fclose.?.
[*] 3050: 72 14 11 40 5f 66 6f 70 65 6e 24 55 4e 49 58 32 r..@_fopen$UNIX2
[*] 3060: 30 30 33 00 90 00 72 18 11 40 5f 66 72 65 61 64 003.?.r..@_fread
[*] 3070: 00 90 00 72 1c 11 40 5f 66 72 65 65 00 90 00 72 .?.r..@_free.?.r
[*] 3080: 20 11 40 5f 66 73 65 65 6b 00 90 00 72 24 11 40 ..@_fseek.?.r$.@
[*] 3090: 5f 70 72 69 6e 74 66 00 90 00 72 28 11 40 5f 73 _printf.?.r(.@_s
[*] 30a0: 77 61 70 5f 6c 6f 61 64 5f 63 6f 6d 6d 61 6e 64 wap_load_command
[*] 30b0: 00 90 00 72 2c 11 40 5f 73 77 61 70 5f 6d 61 63 .?.r,.@_swap_mac
[*] 30c0: 68 5f 68 65 61 64 65 72 00 90 00 72 30 11 40 5f h_header.?.r0.@_
[*] 30d0: 73 77 61 70 5f 6d 61 63 68 5f 68 65 61 64 65 72 swap_mach_header
[*] 30e0: 5f 36 34 00 90 00 72 34 11 40 5f 73 77 61 70 5f _64.?.r4.@_swap_
[*] 30f0: 73 65 67 6d 65 6e 74 5f 63 6f 6d 6d 61 6e 64 00 segment_command.
[*] 3100: 90 00 72 38 11 40 5f 73 77 61 70 5f 73 65 67 6d ?.r8.@_swap_segm
[*] 3110: 65 6e 74 5f 63 6f 6d 6d 61 6e 64 5f 36 34 00 90 ent_command_64.?
[*] 3120: 00 72 3c 11 40 5f 73 79 73 74 65 6d 24 55 4e 49 .r<.@_system$UNI
[*] 3130: 58 32 30 30 33 00 90 00 00 01 5f 00 05 00 05 5f X2003.?..._...._
[*] 3140: 6d 68 5f 65 78 65 63 75 74 65 5f 68 65 61 64 65 mh_execute_heade
[*] 3150: 72 00 3f 69 73 5f 66 65 65 64 66 61 63 66 00 43 r.?is_feedfacf.C
[*] 3160: 73 77 61 70 5f 62 79 74 65 73 00 48 6d 61 00 4d swap_bytes.Hma.M
[*] 3170: 64 75 6d 70 5f 00 5d 02 00 00 00 03 00 c0 21 00 dump_.]......?!.
[*] 3180: 03 00 80 22 00 00 02 69 6e 00 58 63 68 00 84 01 ..?"...in.Xch.?.
[*] 3190: 03 00 c0 22 00 00 03 73 65 67 5f 6d 61 63 68 00 ..?"...seg_mach.
[*] 31a0: 7f 68 65 61 64 65 72 00 a4 01 6e 63 6d 64 73 5f header.?.ncmds_
[*] 31b0: 6d 61 63 68 00 a9 01 03 00 f0 24 00 00 02 6f 5f mach.?...?$...o_
[*] 31c0: 6c 6f 61 64 65 72 00 9a 01 5f 6d 61 67 69 63 00 loader.?._magic.
[*] 31d0: 9f 01 03 00 e0 25 00 03 00 80 27 00 03 00 e0 28 ?...?%...?'...?(
[*] 31e0: 00 03 00 d0 2d 00 00 00 c0 21 40 40 b0 02 70 a0 ...?-...?!@@?.p?
[*] 31f0: 01 c0 01 20 f0 04 a0 08 00 00 00 00 49 01 00 00 .?..?.?.....I...
[*] 3200: 0e 01 00 00 40 24 00 00 54 01 00 00 0e 01 00 00 ....@$..T.......
[*] 3210: f0 2a 00 00 02 00 00 00 0f 01 10 00 00 10 00 00 ?*..............
[*] 3220: 16 00 00 00 0f 01 00 00 60 24 00 00 23 00 00 00 ........`$..#...
[*] 3230: 0f 01 00 00 d0 26 00 00 34 00 00 00 0f 01 00 00 ....?&..4.......
[*] 3240: 70 22 00 00 43 00 00 00 0f 01 00 00 c0 20 00 00 p"..C.......?...
[*] 3250: 50 00 00 00 0f 01 00 00 80 23 00 00 5c 00 00 00 P.......?#..\...
[*] 3260: 0f 01 00 00 e0 22 00 00 6a 00 00 00 0f 01 00 00 ....?"..j.......
[*] 3270: 40 21 00 00 70 00 00 00 0f 01 00 00 00 21 00 00 @!..p........!..
[*] 3280: 7c 00 00 00 01 00 00 01 00 00 00 00 84 00 00 00 |...........?...
[*] 3290: 01 00 00 01 00 00 00 00 8a 00 00 00 01 00 00 01 ........?.......
[*] 32a0: 00 00 00 00 92 00 00 00 01 00 00 01 00 00 00 00 ....?...........
[*] 32b0: a2 00 00 00 01 00 00 01 00 00 00 00 a9 00 00 00 ?...........?...
[*] 32c0: 01 00 00 01 00 00 00 00 af 00 00 00 01 00 00 01 ........?.......
[*] 32d0: 00 00 00 00 b6 00 00 00 01 00 00 01 00 00 00 00 ....?...........
[*] 32e0: be 00 00 00 01 00 00 01 00 00 00 00 d1 00 00 00 ?...........?...
[*] 32f0: 01 00 00 01 00 00 00 00 e3 00 00 00 01 00 00 01 ........?.......
[*] 3300: 00 00 00 00 f8 00 00 00 01 00 00 01 00 00 00 00 ....?...........
[*] 3310: 0e 01 00 00 01 00 00 01 00 00 00 00 27 01 00 00 ............'...
[*] 3320: 01 00 00 01 00 00 00 00 38 01 00 00 01 00 00 01 ........8.......
[*] 3330: 00 00 00 00 0b 00 00 00 0c 00 00 00 0d 00 00 00 ................
[*] 3340: 0e 00 00 00 0f 00 00 00 10 00 00 00 11 00 00 00 ................
[*] 3350: 12 00 00 00 13 00 00 00 14 00 00 00 15 00 00 00 ................
[*] 3360: 16 00 00 00 17 00 00 00 18 00 00 00 19 00 00 00 ................
[*] 3370: 00 00 00 40 0b 00 00 00 0c 00 00 00 0d 00 00 00 ...@............
[*] 3380: 0e 00 00 00 0f 00 00 00 10 00 00 00 11 00 00 00 ................
[*] 3390: 12 00 00 00 13 00 00 00 14 00 00 00 15 00 00 00 ................
[*] 33a0: 16 00 00 00 17 00 00 00 18 00 00 00 20 00 5f 5f ..............__
[*] 33b0: 6d 68 5f 65 78 65 63 75 74 65 5f 68 65 61 64 65 mh_execute_heade
[*] 33c0: 72 00 5f 64 75 6d 70 5f 68 65 61 64 65 72 00 5f r._dump_header._
[*] 33d0: 64 75 6d 70 5f 6e 63 6d 64 73 5f 6d 61 63 68 00 dump_ncmds_mach.
[*] 33e0: 5f 64 75 6d 70 5f 73 65 67 5f 6d 61 63 68 00 5f _dump_seg_mach._
[*] 33f0: 69 73 5f 66 65 65 64 66 61 63 66 00 5f 6d 61 63 is_feedfacf._mac
[*] 3400: 68 5f 6d 61 67 69 63 00 5f 6d 61 63 68 6f 5f 6c h_magic._macho_l
[*] 3410: 6f 61 64 65 72 00 5f 6d 61 69 6e 00 5f 73 77 61 oader._main._swa
[*] 3420: 70 5f 62 79 74 65 73 00 5f 63 61 6c 6c 6f 63 00 p_bytes._calloc.
[*] 3430: 5f 65 78 69 74 00 5f 66 63 6c 6f 73 65 00 5f 66 _exit._fclose._f
[*] 3440: 6f 70 65 6e 24 55 4e 49 58 32 30 30 33 00 5f 66 open$UNIX2003._f
[*] 3450: 72 65 61 64 00 5f 66 72 65 65 00 5f 66 73 65 65 read._free._fsee
[*] 3460: 6b 00 5f 70 72 69 6e 74 66 00 5f 73 77 61 70 5f k._printf._swap_
[*] 3470: 6c 6f 61 64 5f 63 6f 6d 6d 61 6e 64 00 5f 73 77 load_command._sw
[*] 3480: 61 70 5f 6d 61 63 68 5f 68 65 61 64 65 72 00 5f ap_mach_header._
[*] 3490: 73 77 61 70 5f 6d 61 63 68 5f 68 65 61 64 65 72 swap_mach_header
[*] 34a0: 5f 36 34 00 5f 73 77 61 70 5f 73 65 67 6d 65 6e _64._swap_segmen
[*] 34b0: 74 5f 63 6f 6d 6d 61 6e 64 00 5f 73 77 61 70 5f t_command._swap_
[*] 34c0: 73 65 67 6d 65 6e 74 5f 63 6f 6d 6d 61 6e 64 5f segment_command_
[*] 34d0: 36 34 00 5f 73 79 73 74 65 6d 24 55 4e 49 58 32 64._system$UNIX2
[*] 34e0: 30 30 33 00 64 79 6c 64 5f 73 74 75 62 5f 62 69 003.dyld_stub_bi
[*] 34f0: 6e 64 65 72 00 5f 4e 58 53 77 61 70 49 6e 74 00 nder._NXSwapInt.
[*] 3500: 5f 5f 4f 53 53 77 61 70 49 6e 74 33 32 00 00 00 __OSSwapInt32...
[*] EOF Twitter: @FCE365 (https://twitter.com/FCE365)
YouTube Channel (iOS/macOS related): http://youtube.com/fce365official