lldb调试到ios的main函数

http://blog.csdn.net/mercuryvenus/article/details/51545071 

root# debugserver *:6080  /var/mobile/Containers/Bundle/Application/18E19CF5-E863-4D59-8988-BF3BE20AFB72/MEStore.app/MEStore

启动调试模式

在mac上启动lldb:

topsectekiMac:~ topsec$ lldb
(lldb) platform select remote-ios
  Platform: remote-ios
 Connected: no
  SDK Path: "/Users/topsec/Library/Developer/Xcode/iOS DeviceSupport/8.4 (12H143)"
 SDK Roots: [ 0] "/Users/topsec/Library/Developer/Xcode/iOS DeviceSupport/(null) ((null))"
 SDK Roots: [ 1] "/Users/topsec/Library/Developer/Xcode/iOS DeviceSupport/8.4 (12H143)"
(lldb) process connect connect://172.26.4.2:6080
Process 655 stopped

   ni执行如下指令

0x1fe12000 <+0>:  mov    r8, sp

    0x1fe12004 <+4>:  sub    sp, sp, #0x10
    0x1fe12008 <+8>:  bic    sp, sp, #0x7
    0x1fe1200c <+12>: ldr    r3, [pc, #0x70]           ; <+132>
    0x1fe12010 <+16>: sub    r0, pc, #0x8
    0x1fe12014 <+20>: ldr    r3, [r0, r3]
    0x1fe12018 <+24>: sub    r3, r0, r3
    0x1fe1201c <+28>: ldr    r0, [r8]
    0x1fe12020 <+32>: ldr    r1, [r8, #0x4]
    0x1fe12024 <+36>: add    r2, r8, #0x8
    0x1fe12028 <+40>: ldr    r4, [pc, #0x58]           ; <+136>
    0x1fe1202c <+44>: add    r4, r4, pc
    0x1fe12030 <+48>: str    r4, [sp]
    0x1fe12034 <+52>: add    r4, sp, #0xc
    0x1fe12038 <+56>: str    r4, [sp, #0x4]
    0x1fe1203c <+60>: blx    0x1fe12098                ; dyldbootstrap::start(macho_header const*, int, char const**, long, macho_header const*, unsigned long*)
->  0x1fe12040 <+64>: ldr    r5, [sp, #0xc]
    0x1fe12044 <+68>: cmp    r5, #0x0
    0x1fe12048 <+72>: bne    0x1fe12054                ; <+84>
    0x1fe1204c <+76>: add    sp, r8, #0x4
    0x1fe12050 <+80>: bx     r0 【跳转到ios主程序，点击s进入函数】
    0x1fe12054 <+84>: mov    lr, r5
    0x1fe12058 <+88>: mov    r5, r0

    0x1fe1205c <+92>: ldr    r0, [r8, #0x4]

跳到0x1fe992aa