Microsoft Word - iOSAppReverseEngineering.docx

(Romina) #1

Figure 3-33 Search functions


Choose “Search...”, then type in what you want to search as shown in figure 3-34, to search


for your specified string in all function names. When the string appears in several function


names, you can click “Search again” to go through all of them. Of course, all above operations


can be done by shortcuts.


Figure 3-34 Search functions


The method names in functions window are the same as names exported by class-dump.


Besides Objective-C methods, IDA lists all subroutines that we cannot get with class-dump. All


class-dump contents are method names of Objective-C, it’s easy to learn and read for beginners;


the names of subroutines are just combinations of “sub_” and addresses, they don’t have any


literal meaning, hence are hard to learn and read, freaking many rookies out. However, low-


level iOS is implemented in C and C++, which generate subroutines rather than Objective-C


methods. In this situation, class-dump is entirely defeated, our only choices are tools like IDA. If


we want to go deeper into iOS, we must get familiar with IDA.


-^ Main window


Most iOS developers who have never used IDA before are shocked by the “delirious”


contents presented by main window. It seems a real mess for all beginners; some of them may

Free download pdf