我突然注意到我的ida pro为一些ipa文件生成的c文件是零字节。但是,我能够反编译其他 ipa 文件,但是我得到了一些似乎没有被正确反编译的文件,因此生成了 0 字节的 c 文件。我想把ida日志放在这里以供参考:
BinExport 9 (@a0efa77, Mar 8 2016), (c)2004-2011 zynamics GmbH,
(c)2011- 2016 Google Inc.
bytes pages size description
--------- ----- ---- --------------------------------------------
16326656 1993 8192 allocating memory for b-tree...
16326656 1993 8192 allocating memory for virtual array...
262144 32 8192 allocating memory for name pointers...
-----------------------------------------------------------------
32915456 total memory allocated
Loading processor module /Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/procs/pc64.imc64 for metapc...OK
Autoanalysis subsystem has been initialized. Possible file format: Fat Mach-O file, 2. ARM64 (/Applications/IDA Pro
95/idaq64.app/Contents/MacOS/loaders/macho64.lmc64)
Possible file format: Fat Mach-O file, 1. ARMv7 (/Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/loaders/macho64.lmc64) Loading file
path to binary/binary' into database...
Detected file format: Fat Mach-O file, 2. ARM64 Unloading IDP module /Applications/IDA Pro
95/idaq64.app/Contents/MacOS/procs/pc64.imc64...
Loading processor module /Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/procs/arm64.imc64 for arm...OK
Type library 'macosx64' loaded. Applying types...
Types applied to 0 names.
0. Creating a new segment (0000000100088000-0000000100264CAA) ... ... OK
entries start past the end of the indirect symbol table (reserved1 field greater than the table size)
entries start past the end of the indirect symbol table (reserved1 field greater than the table size)
entries start past the end of the indirect symbol table (reserved1 field greater than the table size)
IDAPython Hex-Rays bindings initialized.
DWARF: Looking for Mach-O DWARF file at "path to binary/binary.dSYM/Contents/Resources/DWARF/binary"...
DWARF: No.
Marking typical code sequences... Flushing buffers, please wait...ok
File '/path to binary/binary' has been successfully loaded into the database.
Compiling file '/Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/idc/ida.idc'...
Executing function 'main'... Compiling file '/Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/idc/onload.idc'...
Executing function 'OnLoad'... IDA is analysing the input file... You may start to explore the input file right now.
----------------------------------------------------------------------------------------------------------
Python 2.7.10 (default, Feb 7 2017, 00:08:15) [GCC 4.2.1 Compatible
Apple LLVM 8.0.0 (clang-800.0.34)] IDAPython 64-bit v1.7.0 final
(serial 0) (c) The IDAPython Team <idapython@googlegroups.com>
----------------------------------------------------------------------------------------------------------
Propagating type information...
Function argument information has beenpropagated
The initial autoanalysis has been finished.
作为 ida 的新手,我无法理解确切的原因,但我猜想它无法找到主要入口点..?? 但是,如果是这样,为什么?
任何线索或重定向到适当的有用链接都会非常棒。谢谢!
更新1:
