xref-code 0.2.0

Ultra blazing fast cross-references, layout recovery, slicing & pseudo-C for x86-64 ELF and Mach-O binaries
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

{
  "sha256": "dd471fc94ff8486e4965914693e819a86a8c677a34e477db59af5b52c3c852da",
  "bytes": 4352,
  "format": "macho",
  "architecture": "x86_64",
  "kind": "execute",
  "base": 4294967296,
  "commands": [
    "0x19",
    "0x19",
    "0x19",
    "0x80000022",
    "0x2",
    "0xb",
    "0xe",
    "0x32",
    "0x2a",
    "0x80000028",
    "0xc",
    "0x26",
    "0x29"
  ],
  "segments": [
    {
      "name": "__PAGEZERO",
      "va": 0,
      "vm_size": 4294967296,
      "offset": 0,
      "file_size": 0
    },
    {
      "name": "__TEXT",
      "va": 4294967296,
      "vm_size": 4096,
      "offset": 0,
      "file_size": 4096
    },
    {
      "name": "__LINKEDIT",
      "va": 4294971392,
      "vm_size": 4096,
      "offset": 4096,
      "file_size": 256
    }
  ],
  "sections": {
    "__text": {
      "va": 4294968256,
      "size": 38,
      "offset": 960
    },
    "__cstring": {
      "va": 4294968294,
      "size": 16,
      "offset": 998
    },
    "__unwind_info": {
      "va": 4294968312,
      "size": 96,
      "offset": 1016
    },
    "__eh_frame": {
      "va": 4294968408,
      "size": 104,
      "offset": 1112
    }
  },
  "symbols": {
    "__mh_execute_header": 4294967296,
    "_macho_entry": 4294968256,
    "_macho_helper": 4294968288,
    "_macho_marker": 4294968294
  },
  "functions": [
    {
      "name": "_macho_entry",
      "start": 4294968256,
      "end": 4294968274
    },
    {
      "name": "_macho_helper",
      "start": 4294968288,
      "end": 4294968294
    }
  ],
  "marker": 4294968294,
  "reference": 4294968260,
  "call": 4294968267,
  "target": 4294968288,
  "compact": null,
  "callback": null
}