General [Curiosity] Why R7 register has a high value

Liderluigi · September 20, 2017

I was reading through the forum and it seems no one knows why R7 register has a really big value when they use it for "hacking" binaries... (Basically those people don't know how processors work, and therefore they know nothing about hacking using debuggers).

R7 register is a Frame Pointer (on iOS), which means that it points to the previously saved stack frame. So whenever a process starts executing the last value saved to the stack is stored in a big memory address such as 0x2FAF0804 (~800 million). For newbies: processor starts executing since the device boots up and, once fully booted, addresses used for storing new processes operations have a huge value in decimal as a result of previous (smaller) addresses used for boot, OS load, etc.

You are welcome

PD: Learn how to hack by studying instead of copying tutorials...

Updated September 20, 2017 by Liderluigi