[ad_1]
In Xcode, I set a breakpoint to a function which is a part of an iOS framework and the disassembly view showed up. All function calls except one (0x1bb286280) were symbolicated (i.e. Xcode showed the name of the function which is being called). How come Xcode wasn’t able to look up the name of the function?
I suspect that the strings were stripped from the dynamic library which contains the function 0x1bb286280.
How can I at least tell which dynamic library is loaded into the portion of memory at 0x1bb286280?
I tried to disassemble the respective library in Hopper, but it also didn’t symbolicate the function 0x1bb286280. Can Hopper show which dylib is that function a part of? When going through the binary in Hopper, I couldn’t find the memory address 0x1bb286280.
Stepping into the function 0x1bb286280 in LLDB inside Xcode and then running thread backtrace when inside 0x1bb286280 in the LLDB console doesn’t show any module/dylib (meanwhile all other frames in the stack trace do show which dylib it is a part of). I do only see * frame #0: 0x00000001bb286280 with no additional symbols after it.
Snippet of the disassembly from Xcode:
mov x0, x8
bl 0x1b6fa47ac ; symbol stub for: dispatch_sync
ldur x8, [x29, #-0x28]
ldr w19, [x8, #0x18]
sub x0, x29, #0x30
mov w1, #0x8 ; =8
bl 0x1bb286280 ; How do I symbolicate this function?
[ad_2]
Source link
