Microsoft Word - iOSAppReverseEngineering.docx

(Romina) #1

Figure 3-45 Text search


There’re other searching options available, you can check them out according to your


situations. Then check “Find all occurences” and click “OK”. IDA will search the whole binary


and show all the matching strings.


Graph view provides us with so many features; I’ve only introduced some common ones,


proficiency in them ensures deeper research. Graph view is simple and clear, it’s easy to see the


logics between different subroutines. As newbies, we mostly use graph view. When using LLDB


for debugging, we’ll switch to text view to get the address of a symbol listed on the left side, as


shown in figure 3-46.


Figure 3-46 Text view


It should be noted that one bug of IDA will cause the incomplete display of a subroutine at


the end of its graph view (For example, one subroutine has 100 lines of instructions but only


displays 80 lines). When you are suspicious about instructions in graph view, just switch to text


view to see whether some code is missing. This bug occurs by very little chance, if you happen


to encounter it unfortunately, welcome to http://bbs.iosre.com for discussion and solution.

Free download pdf