恢复符号表小记

拆分架构

查看架构信息

$lipo -info WeChat

或者查看MachO

$file WeChat

$lipo WeChat -thin arm64 -output WeChat_arm64

$lipo WeChat -thin armv7 -output WeChat_armv7

恢复符号表

下载工具restore-symbol

https://github.com/tobefuturer/restore-symbol

$git clone --recursive https://github.com/tobefuturer/restore-symbol.gitcdrestore-symbol

$cd restore-symbol

$make restore-symbol

开始恢复符号表

把拆分的架构放入restore-symbol目录

./restore-symbol WeChat_arm64 -o WeiChat_arm64

1.打开ida工具，File->Script file

2.运行ida_search_block.py脚本，生成block_symbol.json文件

ida_search_block.py脚本地址

3.恢复Block符号表

./restore-symbol WeiChat_arm64 -o WeChat_block -j block_symbol.json

合并架构

lipo -create WeChat_arm64 WeChat_armv7 -output WeiXin