Reverse Engineering Asked on May 19, 2021
I’m looking for the following dylib file which is included from process loginwindow
.
If I run vmmap
to inspect loginwindow
while it’s up and running I get :
user@mycomp / % sudo vmmap -I ``pgrep loginwindow`` | grep libIASUnifiedProgress.dylib
__TEXT 1c7566000-1c756e000 [ 32K 32K 0K 0K] r-x/r-x SM=COW /usr/lib/libIASUnifiedProgress.dylib
__DATA_CONST 1fdd05628-1fdd06438 [ 3600 3600 0K 0K] rw-/rw- SM=COW /usr/lib/libIASUnifiedProgress.dylib
__DATA 200ff1f18-200ff27b0 [ 2200 2200 0K 0K] rw-/rw- SM=COW /usr/lib/libIASUnifiedProgress.dylib
__AUTH_CONST 207d4b260-207d4c008 [ 3496 3496 0K 0K] rw-/rw- SM=COW /usr/lib/libIASUnifiedProgress.dylib
__OBJC_CONST 207d4c008-207d4c368 [ 864 864 0K 0K] rw-/rw- SM=COW /usr/lib/libIASUnifiedProgress.dylib
__DATA_DIRTY 20a5b9250-20a5b9460 [ 528 528 528 0K] rw-/rw- SM=COW /usr/lib/libIASUnifiedProgress.dylib
however, the file doesn’t appear to be there … I’m guessing it’s some new trick made by Apple, perhaps do you know how can I find it anyway ?
Thanks,
On ARM macOS, like on iOS, most of the common dylibs are no longer shipped as separate files, but are bundled into the dyld shared cache. You can usually find the caches in /System/Library/dyld/
.
Correct answer by Igor Skochinsky on May 19, 2021
Get help from others!
Recent Answers
Recent Questions
© 2024 TransWikia.com. All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP