Microsoft Word - iOSAppReverseEngineering.docx

(Romina) #1

source of R0:


Process 154446 stopped
* thread #1: tid = 0x25b4e, 0x331f0900 IMCore`___lldb_unnamed_function425$$IMCore + 220,
queue = 'com.apple.main-thread, stop reason = breakpoint 1.1
frame #0: 0x331f0900 IMCore`___lldb_unnamed_function425$$IMCore + 220
IMCore`___lldb_unnamed_function425$$IMCore + 220:




  • 0x331f0900: blx 0x332603b0 ; symbol stub for: objc_msgSend
    0x331f0904: ldr r0, [sp, #40]
    0x331f0906: mov r2, r4
    0x331f0908: ldr r1, [sp, #20]
    (lldb) p (char )$r1
    (char
    ) $7 = 0x2f7d897a "removeObject:"
    (lldb) po $r0
    <__NSArrayM 0x170ec120>(
    mailto:[email protected]
    )





(lldb) po $r2
mailto:[email protected]
(lldb) ni
......
Process 154446 stopped
* thread #1: tid = 0x25b4e, 0x331f090a IMCore`___lldb_unnamed_function425$$IMCore + 230,
queue = 'com.apple.main-thread, stop reason = instruction step over
frame #0: 0x331f090a IMCore`___lldb_unnamed_function425$$IMCore + 230
IMCore`___lldb_unnamed_function425$$IMCore + 230:




  • 0x331f090a: blx 0x332603b0 ; symbol stub for: objc_msgSend
    0x331f090e: ldr r1, [sp, #24]
    0x331f0910: blx 0x332603b0 ; symbol stub for: objc_msgSend
    0x331f0914: cbz r0, 0x331f0946 ; _lldb_unnamed_function425$$IMCore +
    290
    (lldb) p (char )$r1
    (char
    ) $10 = 0x2f7d8113 "valueForKey:"
    (lldb) po $r2
    mailto:[email protected]
    (lldb) po $r0
    {
    "mailto:[email protected]" = 1;
    }
    (lldb) po [$r0 class]
    NSCFDictionary
    (lldb) ni
    ......
    Process 154446 stopped






  • thread #1: tid = 0x25b4e, 0x331f0910 IMCore___lldb_unnamed_function425$$IMCore + 236, queue = 'com.apple.main-thread, stop reason = instruction step over frame #0: 0x331f0910 IMCore_lldb_unnamedfunction425$$IMCore + 236
    IMCore`
    lldb_unnamed_function425$$IMCore + 236:





  • 0x331f0910: blx 0x332603b0 ; symbol stub for: objc_msgSend
    0x331f0914: cbz r0, 0x331f0946 ; _lldb_unnamedfunction425$$IMCore +
    290
    0x331f0916: cmp r0, #2
    0x331f0918: beq 0x331f09ca ;
    lldb_unnamed_function425$$IMCore +
    422
    (lldb) p (char )$r1
    (char
    ) $14 = 0x2f7de6f3 "integerValue"
    (lldb) po $r0
    1
    (lldb) po [$r0 class]




Free download pdf