Search code examples
iosassemblyarmreverse-engineeringdisassembly

Hexadecimal Meaning in Hopper Disassembler iOS Files


When opening certain IOS files such as the kernel (can apply to other situations, just specifying this) a list of hexadecimal values appear on the left on the program (usually Hopper Disassembler). What exactly do these values mean for the IOS kernel? If anyone can explain simply that would be great! Thanks.


Solution

  • From the documentation:

    The first column (blue numbers) represents the addresses of the instructions. In front of each of them, the instruction, and its operands (or arguments).

    Like here for iOS 12.1.3(beta 4) kernel: enter image description here The subroutine sub_fffffff0070750e starts with the instruction mov at the address fffffff00707505e.