On Tue, 2011-05-10 at 14:06 +0200, Samuel Thibault wrote: ... > > Well objdump gave a lot of hits for mach_port_deallocate but > > mach_port_deallocate_debug was not found. And the addresses are > > different from the hex editor. Anyway using objdump -D I found it: > > > > 002c10c0 <mach_port_deallocate_debug>: > > 2c10c0: 00 00 add %al,(%eax) > > But that's not a file offset. Actually I meant objdump -x, to get the > headers, which tell you know virtual addresses relate with file offsets.
OK I found it: SYMBOL TABLE: ... 002c10c0 l O .bss 00000004 mach_port_deallocate_debug Is the file offset 4 byte? How to change the hex line: 002c10c0: 2318 0614 1600 000a etc.