Microsoft Word - iOSAppReverseEngineering.docx

0x30230d70: mov r1, r5
0x30230d72: blx r6
0x30230d74: movw r0, #26972
(lldb) p $r1
(unsigned int) $27 = 0
(lldb) ni
Process 37477 stopped

• thread #1: tid = 0x9265, 0x30230d70 IMCore___lldb_unnamed_function425$$IMCore + 1356, queue = 'com.apple.main-thread, stop reason = instruction step over frame #0: 0x30230d70 IMCore_lldb_unnamedfunction425$$IMCore + 1356
  IMCore`lldb_unnamed_function425$$IMCore + 1356:

• 
  

  
  

  0x30230d70: mov r1, r5
  0x30230d72: blx r6
  0x30230d74: movw r0, #26972
  0x30230d78: movt r0, #2081
  (lldb) p $r5
  (unsigned int) $28 = 1
  (lldb) ni
  Process 37477 stopped

  
  

  
  

• thread #1: tid = 0x9265, 0x30230d72 IMCore___lldb_unnamed_function425$$IMCore + 1358, queue = 'com.apple.main-thread, stop reason = instruction step over frame #0: 0x30230d72 IMCore_lldb_unnamedfunction425$$IMCore + 1358
  IMCore`lldb_unnamed_function425$$IMCore + 1358:

• 
  

  
  

  0x30230d72: blx r6
  0x30230d74: movw r0, #26972
  0x30230d78: movt r0, #2081
  0x30230d7c: add r0, pc
  (lldb) si
  Process 37477 stopped

  
  

  
  

• thread #1: tid = 0x9265, 0x2db76444 ChatKit__71-[CKPendingConversation refreshStatusForAddresses:withCompletionBlock:]_block_invoke, queue = 'com.apple.main- thread, stop reason = instruction step into frame #0: 0x2db76444 ChatKit71-[CKPendingConversation
  refreshStatusForAddresses:withCompletionBlock:]_block_invoke
  ChatKit`71-[CKPendingConversation
  refreshStatusForAddresses:withCompletionBlock:]_block_invoke:

• 
  

  
  

  0x2db76444: push {r4, r5, r6, r7, lr}
  0x2db76446: add r7, sp, #12
  0x2db76448: str r8, [sp, #-4]!
  0x2db7644c: sub sp, #4
  (lldb) ni
  ......
  Process 37477 stopped

  
  

  
  

• thread #1: tid = 0x9265, 0x2db7645c ChatKit__71-[CKPendingConversation refreshStatusForAddresses:withCompletionBlock:]_block_invoke + 24, queue = 'com.apple.main-thread, stop reason = instruction step over frame #0: 0x2db7645c ChatKit71-[CKPendingConversation
  refreshStatusForAddresses:withCompletionBlock:]_block_invoke + 24
  ChatKit`71-[CKPendingConversation
  refreshStatusForAddresses:withCompletionBlock:]_block_invoke + 24:

• 
  

  
  

  0x2db7645c: cmp r0, #2
  0x2db7645e: bne 0x2db7647a ; __71-[CKPendingConversation
  refreshStatusForAddresses:withCompletionBlock:]_block_invoke + 54
  0x2db76460: movw r0, #19376
  0x2db76464: movt r0, #2535
  (lldb) p $r0
  (unsigned int) $29 = 0
  (lldb) ni
  ......
  Process 37477 stopped