Microsoft Word - iOSAppReverseEngineering.docx

(Romina) #1

The execution flow of MobileSMS is very evident now. There are 3 conditional branches,


which are CBZ, CBZ and CBNZ respectively. At each time, the value of R0 is 0, 341691792 and


341691792 respectively. As a result, we can know that the execution flow is shown in figure 10-






Figure 10- 21 Execution flow


So the value of [CKPendingConversation sendingService] actually comes from


[CKPendingConversation composeSendingService], which is the 5th data source, right? OK, let’s


proceed to the new method in IDA, as shown in figure 10-22.


Figure 10- 22 [CKPendingConversation composeSendingService]


Obviously, [CKPendingConversation composeSendingService] merely returns the value of

Free download pdf