使用 ida pro 的某些 ipa 的功能窗口为空

逆向工程 艾达 反编译 ios idapro-sdk
2021-07-05 06:49:05

我突然注意到我的ida pro为一些ipa文件生成的c文件是零字节。但是,我能够反编译其他 ipa 文件,但是我得到了一些似乎没有被正确反编译的文件,因此生成了 0 字节的 c 文件。我想把ida日志放在这里以供参考:

BinExport 9 (@a0efa77, Mar  8 2016), (c)2004-2011 zynamics GmbH,
(c)2011-           2016 Google Inc.

  bytes   pages size description
--------- ----- ---- --------------------------------------------  
16326656  1993 8192 allocating memory for b-tree...  
16326656  1993 8192 allocating memory for virtual array...  
262144      32 8192 allocating memory for name pointers...
-----------------------------------------------------------------  
32915456            total memory allocated

Loading processor module /Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/procs/pc64.imc64 for metapc...OK 

Autoanalysis subsystem has been initialized. Possible file format: Fat Mach-O file, 2. ARM64 (/Applications/IDA Pro
95/idaq64.app/Contents/MacOS/loaders/macho64.lmc64) 

Possible file format: Fat Mach-O file, 1. ARMv7 (/Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/loaders/macho64.lmc64) Loading file
path to binary/binary' into database... 

Detected file format: Fat Mach-O file, 2. ARM64 Unloading IDP module /Applications/IDA Pro
95/idaq64.app/Contents/MacOS/procs/pc64.imc64... 

Loading processor module /Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/procs/arm64.imc64 for arm...OK

Type library 'macosx64' loaded. Applying types... 

Types applied to 0 names.

  0. Creating a new segment  (0000000100088000-0000000100264CAA) ... ... OK

entries start past the end of the indirect symbol table (reserved1 field greater than the table size) 

entries start past the end of the indirect symbol table (reserved1 field greater than the table size)

entries start past the end of the indirect symbol table (reserved1 field greater than the table size) 

IDAPython Hex-Rays bindings initialized. 

DWARF: Looking for Mach-O DWARF file at "path to binary/binary.dSYM/Contents/Resources/DWARF/binary"... 

DWARF: No.

Marking typical code sequences... Flushing buffers, please wait...ok

File '/path to binary/binary' has been successfully loaded into the database. 

Compiling file '/Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/idc/ida.idc'... 

Executing function 'main'... Compiling file '/Applications/IDA Pro 6.95/idaq64.app/Contents/MacOS/idc/onload.idc'... 

Executing function 'OnLoad'... IDA is analysing the input file... You may start to explore the input file right now.
---------------------------------------------------------------------------------------------------------- 
Python 2.7.10 (default, Feb  7 2017, 00:08:15)  [GCC 4.2.1 Compatible
Apple LLVM 8.0.0 (clang-800.0.34)]  IDAPython 64-bit v1.7.0 final
(serial 0) (c) The IDAPython Team <idapython@googlegroups.com>
---------------------------------------------------------------------------------------------------------- 
Propagating type information... 
Function argument information has beenpropagated 
The initial autoanalysis has been finished.

作为 ida 的新手,我无法理解确切的原因,但我猜想它无法找到主要入口点..?? 但是,如果是这样,为什么?

任何线索或重定向到适当的有用链接都会非常棒。谢谢!

更新1:

我想我也应该附上 ida 屏幕截图。在此处输入图片说明

0个回答
没有发现任何回复~