_text:000000010009E6FC lea rax, registerButtonPressedĠ00000010009e6fc lea rax, qword įrom the naming rules, the string is regarded as a function! Although this function is also somewhat related to registration (the function that gets the information after clicking the registration information), we just saw that it is a string. Later, when I looked at the logic and found that it was a dead end, I took a closer look at the call statement. At first I thought the function it jumped to must be a registration-related function, and jumped to xref and directly named the variable. Note that you cannot use the x key to directly search for a reference to this string. Very intuitive.~~ Although the CFString string references introduced by Obj-C in the decompiled code are too blind to read… but it is still very useful!~~ Say a little bit about IDA here, all string names are automatically named as names related to string content such as. Double-click to enter the disassembly window to find data references here. Bind the function above it must be a key function related to registration. Think about the MVC that you learned in your sophomore year, and you also know that this is a button event, or a registered button. Shift-F12 Open the IDA string window, Ctrl-F Search register and accidentally find an important thing Find the real executable of the software under. The software downloaded from the official website is an S urge.app folder, the folder named is how OS X software is organized. Actual combat is the baby’s favorite ho ho ho The software selected here is Surge, the famous “network acceleration tool” under OS X. The following will describe two ways to bypass signatures, this is one of them. Digital signatures are available in almost all programs under mac.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |