@dzyding wrote:
越狱机为 iOS8.4.1 iPhone5
[ 0] 0x00094000 /System/Library/CoreServices/SpringBoard.app/SpringBoard(0x0000000000098000)
计算偏移后基地址为
0x00014A10
+0x00094000
=0x000A8A10
(lldb) br s -a 0x000A8A10 Breakpoint 1: where = SpringBoard`_mh_execute_header + 50656, address = 0x000a8a10 Process 84 stopped * thread #1, queue = 'com.apple.main-thread', stop reason = breakpoint 1.1 frame #0: 0x000a8a10 SpringBoard`_mh_execute_header + 68112 SpringBoard`_mh_execute_header: -> 0xa8a10 <+68112>: svcge #0x3b5f0 0xa8a14 <+68116>: stceq p9, c14, [r0, #-180] 0xa8a18 <+68120>: pkhbtmi r11, r3, r4, lsl #1 0xa8a1c <+68124>: rscspl pc, r6, r3, asr #4 Target 0: (SpringBoard) stopped.
-> 0xa8a10 <+68112>: svcge #0x3b5f0 0xa8a14 <+68116>: stceq p9, c14, [r0, #-180] 0xa8a18 <+68120>: pkhbtmi r11, r3, r4, lsl #1 0xa8a1c <+68124>: rscspl pc, r6, r3, asr #4
这一段,并没有像书中那样,基本和汇编语言一一对应,请问是正常的么。
Posts: 6
Participants: 2