Help/Support Having Issues with IDA Search Functions...

[Ambrosianyc 113 iPhone 7 13.3]

I'm using IDA on a mac, searching for 10227FF68 but no search result is coming up in IDA-View A, or any other view. I did a test search in Hex view for a line i was literally looking at, and not even a result came up for that, even though it obviously exists, since I was staring at it right on the screen.

When I loaded the executable this first popped up, is that why i'm having issues? Can't believe how hard this is, for seemingly no good reason. 

Here are some screenshots: https://ibb.co/album/mv1FyL 

[Rook 547k iPad Pro (2nd gen) 17.4 Donor]

  On 3/23/2022 at 4:02 PM, Ambrosianyc said:

10227FF68

Expand  

This looks like an offset.

So just press “G” while in IDA and paste the offset and hit enter.

[Ambrosianyc 113 iPhone 7 13.3]

  On 3/24/2022 at 1:18 AM, Rook said:

This looks like an offset.

So just press “G” while in IDA and paste the offset and hit enter.

Expand  

Didnt work  I’m not sure my binary loaded properly. I included a screenshot above of the message that popped up when i first loaded it. Said no entry point could be identified and to choose it myself… the hex view appears though, but I’m not sure if it’s fully loaded or not. IDA-View A looks weird, like a shell

 

[SayGus 0]

just to know, are you using freeware version on mac?

[Ambrosianyc 113 iPhone 7 13.3]

  On 3/24/2022 at 5:43 AM, SayGus said:

just to know, are you using freeware version on mac?

Expand  

Yeah !

[Ambrosianyc 113 iPhone 7 13.3]

  On 3/24/2022 at 1:18 AM, Rook said:

This looks like an offset.

So just press “G” while in IDA and paste the offset and hit enter.

Expand  

@Rook - Can you tell me what this means? https://ibb.co/JCSmB7Y

[Rook 547k iPad Pro (2nd gen) 17.4 Donor]

  On 3/24/2022 at 2:33 PM, Ambrosianyc said:

@Rook - Can you tell me what this means? https://ibb.co/JCSmB7Y

Expand  

Can you try via Hopper?

I don't remember if IDA Freeware worked well with ARM64 executables.

[Ambrosianyc 113 iPhone 7 13.3]

  On 3/24/2022 at 2:49 PM, Rook said:

Can you try via Hopper?

I don't remember if IDA Freeware worked well with ARM64 executables.

Expand  

What's Hopper?     Yeah it doesn't, it just gave the option to load it as a binary instead, so that's what I did, but that error message came up. I assumed it loaded properly since the Hex viewer looked loaded, but perhaps it wasnt 

[Rook 547k iPad Pro (2nd gen) 17.4 Donor]

  On 3/24/2022 at 2:52 PM, Ambrosianyc said:

What's Hopper?     Yeah it doesn't, it just gave the option to load it as a binary instead, so that's what I did, but that error message came up. I assumed it loaded properly since the Hex viewer looked loaded, but perhaps it wasnt 

Expand  

Hopper Disassembler is the same or similar to IDA and it's free.

Otherwise, you'll have to find a cracked version of IDA to use.

[Ambrosianyc 113 iPhone 7 13.3]

  On 3/24/2022 at 2:57 PM, Rook said:

Hopper Disassembler is the same or similar to IDA and it's free.

Otherwise, you'll have to find a cracked version of IDA to use.

Expand  

gotcha. is 010 Editor the same? I have the full version of that