Here is a more detailed analysis: http://blog.accuvantlabs.com/blog/bthomas/evasi0n-jailbreaks-userland-component http://blog.accuvantlabs.com/blog/bthomas/evas

Here is a more detailed analysis: http://blog.accuvantlabs.com/blog/bthomas/evasi0n-jailbreaks-userland-component http://blog.accuvantlabs.com/blog/bthomas/evasi0n-jailbreaks... The lazy binding is really interesting. There is lots of interesting stuff in the kernel, dyld, and libSystem. I would encourage you to have a look! You can do interesting things like run code before libSystem_init[1] [0]: https://github.com/Apple-FOSS-Mirror/dyld/tree/master/src https://github.com/Apple-FOSS-Mirror/dyld/tree/master/src https://github.com/Apple-FOSS-Mirror/Libsystem/blob/master/init.c https://github.com/Apple-FOSS-Mirror/Libsystem/blob/master/i... https://github.com/Apple-FOSS-Mirror/xnu/blob/master/bsd/kern/kern_exec.c https://github.com/Apple-FOSS-Mirror/xnu/blob/master/bsd/ker... [1]: https://gist.github.com/jevinskie/4615901 https://gist.github.com/jevinskie/4615901