jtool2 finds syscalls, Mach traps, MIG tables, interesting (for me, at least) functions, and IOKit objects - thousands of objects in all. kernelcache symbolication (what I formerly provided via joker) - which has become even more important since the advent of monolithic ('1469') kernelcaches, with no more symbols.-analyze to automatically analyze any Mach-O, generating a companion file.

Color terminal output, enabled by JCOLOR=1Īs the code got more and more complex, I decided to rewrite jtool from scratch, bringing you jtool2 - and effectively deprecating the v1 binary.

built-in disassembler functionality with (limited but constantly improving) emulation capabilities, which already outdo fancy commercial GUI disassemblers.

Most importantly, it can be run on a variety of platforms - OS X, iOS, and even Linux, where Apple's tools don't exist.īut that's not all.

Along the way, jtool absorbed additional Mach-O commands such as atos(1), dyldinfo(1), nm(1), segedit(1), pagestuff(1), strings(1), and even codesign(1) and the informal ldid. The jtool utility started as a companion utility to the 1 st edition of MacOS internals, because I wanted to demonstrate Mach-O format intrinstics, and was annoyed with XCode's otool(1). JTool2 - Taking the O out of otool - squared jtool - Taking the O out of otool(1), and so much more What is this?

Free for apple instal Disassembly