How can I identify the entry point of an executable in LLDB?
In GDB, we can use the info file
command, but that won't work in LLDB.
Can anyone show me how to do that?
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this communityYou can make use of the command
(lldb) process launch --stop-at-entry
to start the program. This stops you right at the entry point. From there lldb will tell you the address as well, in case this is what you are interested in.
If instead you were interested in the actual main function, and not the entry point, you should have a look at the related question lldb: break at start of actual code, not entrypoint
--stop-at-entry
and breaking at __libc_start_main
?
__libc_start_main
is not used on OS X (it's a glibc thing)