Microsoft Word - iOSAppReverseEngineering.docx

(Romina) #1

Figure 3-51 sub_350C4


Now that we know little about assembly language, but from the literal meaning of these


keywords, it can be concluded that the function of this subroutine is to generate an event named


“TerminateApplicationGroup”, specify sub_351F8 to be the handler of it, and then append this


event to a queue for sequential execution, thus close all Apps by this way. This makes sense:


Before a mall closes, we need to close all its shops; before respring, we need to close all Apps.


Let’s go to sub_351F8 to see its implementation, as shown in figure 3-52.

Free download pdf