1

I'm debugging a iOS App by IDA, and I need to see the value of some var like v57 below. Through the Locals panel know the value is 0x1137D0E00LL, but I want to see the real value or class.

How to get it? Can someone help?

Code Here:

v57 = sub_10AA66818();
v58 = (void *)objc_retainAutoreleasedReturnValue(v57);
v59 = v58;
v13 = v65;
v60 = objc_msgSend(v58, (const char *)&loc_109CB2ABC + 1, v46, v29, v65);

sub_10AA66818() return a OC Singleton Object and Stored in v57:

__int64 sub_10AA66818()
{
  if ( qword_10DCB7038 != -1 )
    dispatch_once(&qword_10DCB7038, &off_10BE41040);
  return objc_retainAutoreleaseReturnValue(qword_10DCB7030);
}

According to the second code box, that Singleton perform a selector to do something.

It's why I try to know what sub_10AA66818() return in debugging.

Improve this question
9
  • Your question is unclear. Do you mean get the value through the SDK? If not, it's showing you the numeric value of the rax register at that point; what other "real value" are you looking for?
    – Rolf Rolles
    Dec 16, 2021 at 6:56
  • @RolfRolles after analyse, sub_10A7D2818() return some string value, but it's hidden in whole app, that why I want to know real value durning debugging.
    – Yiiff
    Dec 16, 2021 at 7:52
  • I edited my question, maybe you can get what I mean this time.@RolfRolles
    – Yiiff
    Dec 16, 2021 at 8:06
  • sub_10AA66818() returns an int64
    – blabb
    Dec 16, 2021 at 11:32
  • Why do you think that the value that it showing you is not the "real" value? Why do you think that the real value is "hidden"? Whatever value it's showing you is, in fact, the real value.
    – Rolf Rolles
    Dec 18, 2021 at 19:37

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.