Flutter应用逆向分析相关讨论

FlutterTest>dart --versionDart SDK version: 2.14.4 (stable) (Wed Oct 13 11:11:32 2021 +0200) on "windows_x64"

static const int32_t kMagicValue = 0xdcdcf5f5;static const intptr_t kMagicOffset = 0;static const intptr_t kMagicSize = sizeof(int32_t);static const intptr_t kLengthOffset = kMagicOffset + kMagicSize; //0+32static const intptr_t kLengthSize = sizeof(int64_t);static const intptr_t kKindOffset = kLengthOffset + kLengthSize;//0+32+64static const intptr_t kKindSize = sizeof(int64_t);static const intptr_t kHeaderSize = kKindOffset + kKindSize;//0+32+64+64 = 160

enum Kind {    kFull,      // Full snapshot of an application.    kFullCore,  // Full snapshot of core libraries. Agnostic to null safety.    kFullJIT,   // Full + JIT code    kFullAOT,   // Full + AOT code    kNone,      // gen_snapshot    kInvalid  };

snapshot_stream = BytesIO(snapshot)                                snapshot_stream.seek(0)                                kMagicValue = snapshot_stream.read(4).hex()                                kLengthValue = snapshot_stream.read(8).hex()                                kKindValue = snapshot_stream.read(8).hex()                                print(kMagicValue)                                print(kLengthValue)                                print(kKindValue)

f5f5dcdcfed20b00000000000300000000000000

SnapshotHeaderReader(snapshot->kind(),                            snapshot->Addr(),                            snapshot->length())

const char* expected_features =    Dart::FeaturesString(isolate_group, (isolate_group == NULL), kind_);

version_hash = snapshot_stream.read(32).decode('UTF-8') features = snapshot_stream.read(64+64+32+11).decode('UTF-8') print(version_hash) print(features)

9cf77f4405212c45daf608e1cd646852 product no-code_comments no-dwarf_stack_traces_mode lazy_async_stacks no-lazy_dispatchers use_bare_instructions dedup_instructions no-"asserts" arm-eabi softfp null-safety