-
-
[原创] 关于函数调用链路trace的效果展示【仅供学习参考】
-
发表于: 2024-3-4 18:33 3486
-
对某大厂应用敏感接口的trace效果展示。先是挑选了一些敏感的url【如register device】，接着定位到报文发送的入口，选了堆栈中最顶层的一个入口，接着进行trace。为了方便展示效果，限制了递归的深度为2层（支持完全递归的trace），支持对OC层以及C层函数的入参和返回值的输出，最终打印顺序和函数调用链路保持一致。初步看下来，感觉这个接口的逻辑还是挺简单的，但是如果看ida的话就全被混淆了。
选的这个接口没调用太多的C层函数，主要集中在OC层，但trace是支持C层函数的，也包括svc指令。输出中存在部分无名函数<>，那是由于应用自身的跳板函数混淆手段，通过对某几条汇编指令重新封装为一个小函数，增加混淆复杂度，但这种函数的本质并无太大意义，因此无符号。
一般的ollvm混淆在trace过滤后就能得到很清晰的调用链路，函数逻辑基本能恢复个七七八八，但同样也有不足，不能很好处理计算和内存读写逻辑。
{
+[TTInstallUtil onTheFlyParameter] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA144F0 | text:0x10F26C4F0 | invoke:0x10F2685D0 | system:False | depth:1 | sequence:1 |
return : {
header = {
access = WIFI;
aid = 1180;
"app_language" = zh;
"app_name" = trill;
"app_region" = CN;
"app_version" = "30.6.0";
"auth_status" = 0;
carrier = "";
"carrier_region" = "";
cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
channel = "App Store";
custom = {
"app_language" = zh;
"app_region" = CN;
"build_number" = 306019;
"filter_warn" = 0;
"is_kids_mode" = 0;
"is_pad" = 1;
"user_mode" = 0;
"user_period" = 0;
"web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
};
"device_id" = 7321996726894102022;
"device_model" = arm64;
"device_token" = "";
"display_name" = DemoTT;
idfa = "00000000-0000-0000-0000-000000000000";
"install_id" = 7321998383908030214;
"is_jailbroken" = 0;
"is_upgrade_user" = 0;
language = "zh-Hans-CN";
"mcc_mnc" = "";
"model_display_name" = arm64;
os = iOS;
"os_version" = "16.3";
package = "com.ss.iphone.ugc.Ame";
region = CN;
resolution = "2560*1440";
scene = 0;
"sdk_version" = 272;
timezone = 8;
"tz_name" = "Asia/Shanghai";
"tz_offset" = 28800;
"user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
"vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
};
"magic_tag" = "ss_app_log";
}
{
-[NSRecursiveLock lock] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317BB84 | text:0x1839D3B84 | invoke:0x10F26C524 | system:True | depth:2 | sequence:1 |
return : 6173618176
+[NSMutableDictionary dictionaryWithCapacity:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922DEBAC | text:0x182B36BAC | invoke:0x10F26C594 | system:True | depth:2 | sequence:2 |
para0 : 20
return : {
}
+[TTInstallSandBoxHelper bundleIdentifier] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA13770 | text:0x10F26B770 | invoke:0x10F26C5B8 | system:False | depth:2 | sequence:4 |
return : com.ss.iphone.ugc.Ame
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C5E4 | system:True | depth:2 | sequence:6 |
para0 : com.ss.iphone.ugc.Ame
para1 : package
return : package
+[TTInstallSandBoxHelper versionName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507898 | text:0x105D5F898 | invoke:0x10F26C5FC | system:False | depth:2 | sequence:8 |
return : 30.6.0
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C620 | system:True | depth:2 | sequence:10 |
para0 : -1690678424
para1 : app_version
return : app_version
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C628 | system:True | depth:2 | sequence:11 |
+[TTInstallUtil isJailBroken] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15BF8 | text:0x10F26DBF8 | invoke:0x10F26C63C | system:False | depth:2 | sequence:12 |
return : 0
+[NSNumber numberWithBool:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931A2C98 | text:0x1839FAC98 | invoke:0x10F26C654 | system:True | depth:2 | sequence:13 |
para0 : 0
return : 0
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C678 | system:True | depth:2 | sequence:15 |
para0 : 0
para1 : is_jailbroken
return : is_jailbroken
+[TTReachability primaryCarrierCarrierName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59CCC | text:0x10F6B1CCC | invoke:0x10F26C690 | system:False | depth:2 | sequence:17 |
return : 0
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C6B8 | system:True | depth:2 | sequence:19 |
para0 :
para1 : carrier
return : carrier
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C6C0 | system:True | depth:2 | sequence:20 |
+[TTReachability primaryCarrierIsoCountryCode] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59CE8 | text:0x10F6B1CE8 | invoke:0x10F26C6D0 | system:False | depth:2 | sequence:21 |
return : 0
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C6F8 | system:True | depth:2 | sequence:23 |
para0 :
para1 : carrier_region
return : carrier_region
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C700 | system:True | depth:2 | sequence:24 |
+[TTReachability primaryCarrierMobileCountryCode] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59D04 | text:0x10F6B1D04 | invoke:0x10F26C710 | system:False | depth:2 | sequence:25 |
return : 0
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C734 | system:True | depth:2 | sequence:28 |
+[TTReachability primaryCarrierMobileNetworkCode] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59D20 | text:0x10F6B1D20 | invoke:0x10F26C744 | system:False | depth:2 | sequence:29 |
return : 0
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C768 | system:True | depth:2 | sequence:32 |
+[NSString stringWithFormat:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19318C198 | text:0x1839E4198 | invoke:0x10F26C78C | system:True | depth:2 | sequence:33 |
para0 : %@%@
return : <object returned empty description>
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C7B0 | system:True | depth:2 | sequence:35 |
para0 :
para1 : mcc_mnc
return : mcc_mnc
+[TTReachability currentConnectionMethodName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1154283B8 | text:0x105C803B8 | invoke:0x10F26C7CC | system:False | depth:2 | sequence:37 |
return : WIFI
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C7F4 | system:True | depth:2 | sequence:39 |
para0 : WIFI
para1 : access
return : access
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C818 | system:True | depth:2 | sequence:41 |
para0 : iOS
para1 : os
return : os
+[TTInstallSandBoxHelper appDisplayName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1366C | text:0x10F26B66C | invoke:0x10F26C82C | system:False | depth:2 | sequence:42 |
return : DemoTT
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C850 | system:True | depth:2 | sequence:44 |
para0 : -1181288216
para1 : display_name
return : display_name
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C858 | system:True | depth:2 | sequence:45 |
+[UIDevice currentDevice] </System/iOSSupport/System/Library/PrivateFrameworks/UIKitCore.framework/Versions/A/UIKitCore> | call_cnt:1 | impl:0x1BC35E564 | text:0x1ACBB6564 | invoke:0x10F26C86C | system:True | depth:2 | sequence:46 |
return : <UIDevice: 0x6000095f8540>
-[UIDevice systemVersion] </System/iOSSupport/System/Library/PrivateFrameworks/UIKitCore.framework/Versions/A/UIKitCore> | call_cnt:1 | impl:0x1BC388E80 | text:0x1ACBE0E80 | invoke:0x10F26C884 | system:True | depth:2 | sequence:48 |
return : 16.3
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C8A8 | system:True | depth:2 | sequence:50 |
para0 : 456739448
para1 : os_version
return : os_version
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C8B0 | system:True | depth:2 | sequence:51 |
+[TTInstallUtil platform] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15CAC | text:0x10F26DCAC | invoke:0x10F26C8CC | system:False | depth:2 | sequence:53 |
return : arm64
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26C8F8 | system:True | depth:2 | sequence:55 |
para0 : -1164221840
para1 : device_model
return : device_model
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C900 | system:True | depth:2 | sequence:56 |
+[TTInstallUtil platform] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15CAC | text:0x10F26DCAC | invoke:0x10F26C90C | system:False | depth:2 | sequence:57 |
return : arm64
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26C930 | system:True | depth:2 | sequence:59 |
para0 : -1164221840
para1 : model_display_name
return : model_display_name
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C938 | system:True | depth:2 | sequence:60 |
+[NSLocale preferredLanguages] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922D58E0 | text:0x182B2D8E0 | invoke:0x10F26C94C | system:True | depth:2 | sequence:61 |
return : <__NSArrayM 0x600000e1bbd0>(
zh-Hans-CN,
en-CN
)
-[__NSArrayM objectAtIndex:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x19226595C | text:0x182ABD95C | invoke:0x10F26C968 | system:True | depth:2 | sequence:63 |
para0 : 0
return : zh-Hans-CN
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C990 | system:True | depth:2 | sequence:65 |
para0 : zh-Hans-CN
para1 : language
return : language
+[NSNumber numberWithUnsignedInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193180F10 | text:0x1839D8F10 | invoke:0x10F26C9B4 | system:True | depth:2 | sequence:68 |
para0 : 272
return : 272
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26C9DC | system:True | depth:2 | sequence:70 |
para0 : -1943872830
para1 : sdk_version
return : sdk_version
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C9E4 | system:True | depth:2 | sequence:71 |
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26C9F8 | system:False | depth:2 | sequence:72 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager channel] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507874 | text:0x105D5F874 | invoke:0x10F26CA10 | system:False | depth:2 | sequence:74 |
return : App Store
<> | call_cnt:1 | impl:0x121BF5284 | text:0x11244D284 | invoke:0x10F26CA28 | system:True | depth:2 | sequence:76 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CA5C | system:True | depth:2 | sequence:77 |
___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F26CA78 | system:False | depth:2 | sequence:79 |
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CA90 | system:True | depth:2 | sequence:80 |
para0 : -2076511600
para1 : channel
return : channel
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26CA9C | system:False | depth:2 | sequence:81 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager appID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11550788C | text:0x105D5F88C | invoke:0x10F26CAB4 | system:False | depth:2 | sequence:83 |
return : 1180
<> | call_cnt:1 | impl:0x121BF5284 | text:0x11244D284 | invoke:0x10F26CAD0 | system:True | depth:2 | sequence:85 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CAF8 | system:True | depth:2 | sequence:86 |
___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F26CB14 | system:False | depth:2 | sequence:88 |
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CB30 | system:True | depth:2 | sequence:89 |
para0 : -1875195272
para1 : aid
return : aid
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26CB3C | system:False | depth:2 | sequence:90 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager appName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507880 | text:0x105D5F880 | invoke:0x10F26CB58 | system:False | depth:2 | sequence:92 |
return : trill
<> | call_cnt:1 | impl:0x121BF5284 | text:0x11244D284 | invoke:0x10F26CB70 | system:True | depth:2 | sequence:94 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CB94 | system:True | depth:2 | sequence:95 |
___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F26CBB0 | system:False | depth:2 | sequence:97 |
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CBD0 | system:True | depth:2 | sequence:98 |
para0 : -1197774608
para1 : app_name
return : app_name
+[NSTimeZone localTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E5630 | text:0x182B3D630 | invoke:0x10F26CBE8 | system:True | depth:2 | sequence:99 |
return : Local Time Zone (Asia/Shanghai (GMT+8) offset 28800)
-[__NSLocalTimeZoneI secondsFromGMT] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E56A0 | text:0x182B3D6A0 | invoke:0x10F26CC04 | system:True | depth:2 | sequence:101 |
return : 28800
+[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26CC44 | system:True | depth:2 | sequence:103 |
para0 : 8
return : 8
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26CC68 | system:True | depth:2 | sequence:105 |
para0 : -1943906622
para1 : timezone
return : timezone
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CC70 | system:True | depth:2 | sequence:106 |
+[TTHTTPRequestSerializerBase serializer] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11ECCA48C | text:0x10F52248C | invoke:0x10F26CC84 | system:False | depth:2 | sequence:107 |
return : <TTHTTPRequestSerializerBase: 0x600000065370>
-[TTHTTPRequestSerializerBase userAgentString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11ECCA7CC | text:0x10F5227CC | invoke:0x10F26CC9C | system:False | depth:2 | sequence:109 |
return : DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CCC4 | system:True | depth:2 | sequence:111 |
para0 : DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet
para1 : user_agent
return : user_agent
+[TTInstallUtil resolutionString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15B1C | text:0x10F26DB1C | invoke:0x10F26CCE8 | system:False | depth:2 | sequence:114 |
return : 2560*1440
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26CD18 | system:True | depth:2 | sequence:116 |
para0 : 2560*1440
para1 : resolution
return : resolution
+[TTInstallUtil isUpgradeUser] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507BAC | text:0x105D5FBAC | invoke:0x10F26CD34 | system:False | depth:2 | sequence:118 |
return : 0
+[NSNumber numberWithBool:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931A2C98 | text:0x1839FAC98 | invoke:0x10F26CD44 | system:True | depth:2 | sequence:119 |
para0 : 0
return : 0
-[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26CD68 | system:True | depth:2 | sequence:121 |
para0 : 0
para1 : is_upgrade_user
return : is_upgrade_user
NSClassFromString <Foundation> | call_cnt:1 | impl:0x1931745EC | text:0x1839CC5EC | invoke:0x10F26CD7C | system:True | depth:2 | sequence:123 |
-[__NSPlaceholderDictionary initWithObjectsAndKeys:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x19228C50C | text:0x182AE450C | invoke:0x10F26CE48 | system:True | depth:2 | sequence:125 |
para0 : ss_app_log
return : {
header = {
access = WIFI;
aid = 1180;
"app_name" = trill;
"app_version" = "30.6.0";
carrier = "";
"carrier_region" = "";
channel = "App Store";
"device_model" = arm64;
"display_name" = DemoTT;
"is_jailbroken" = 0;
"is_upgrade_user" = 0;
language = "zh-Hans-CN";
"mcc_mnc" = "";
"model_display_name" = arm64;
os = iOS;
"os_version" = "16.3";
package = "com.ss.iphone.ugc.Ame";
resolution = "2560*1440";
"sdk_version" = 272;
timezone = 8;
"user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
};
"magic_tag" = "ss_app_log";
}
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE5C | system:True | depth:2 | sequence:126 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE64 | system:True | depth:2 | sequence:127 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE6C | system:True | depth:2 | sequence:128 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE74 | system:True | depth:2 | sequence:129 |
-[__NSDictionaryM objectForKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192265CBC | text:0x182ABDCBC | invoke:0x10F26CEB4 | system:True | depth:2 | sequence:133 |
para0 : header
return : {
access = WIFI;
aid = 1180;
"app_name" = trill;
"app_version" = "30.6.0";
carrier = "";
"carrier_region" = "";
channel = "App Store";
"device_model" = arm64;
"display_name" = DemoTT;
"is_jailbroken" = 0;
"is_upgrade_user" = 0;
language = "zh-Hans-CN";
"mcc_mnc" = "";
"model_display_name" = arm64;
os = iOS;
"os_version" = "16.3";
package = "com.ss.iphone.ugc.Ame";
resolution = "2560*1440";
"sdk_version" = 272;
timezone = 8;
"user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
}
+[TTReachability currentConnectionMethodName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1154283B8 | text:0x105C803B8 | invoke:0x10F26CED0 | system:False | depth:2 | sequence:135 |
return : WIFI
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CEF4 | system:True | depth:2 | sequence:137 |
para0 : WIFI
para1 : access
return : WIFI
+[NSTimeZone localTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E5630 | text:0x182B3D630 | invoke:0x10F26CF0C | system:True | depth:2 | sequence:139 |
return : Local Time Zone (Asia/Shanghai (GMT+8) offset 28800)
-[__NSLocalTimeZoneI secondsFromGMT] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E56A0 | text:0x182B3D6A0 | invoke:0x10F26CF20 | system:True | depth:2 | sequence:141 |
return : 28800
+[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26CF54 | system:True | depth:2 | sequence:143 |
para0 : 8
return : 8
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CF78 | system:True | depth:2 | sequence:145 |
para0 : -1943906622
para1 : timezone
return : timezone
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CF80 | system:True | depth:2 | sequence:146 |
+[NSLocale currentLocale] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192282290 | text:0x182ADA290 | invoke:0x10F26CF94 | system:True | depth:2 | sequence:147 |
return : <__NSCFLocale: 0x600002908540> 'zh_CN'}
-[__NSCFLocale objectForKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192287714 | text:0x182ADF714 | invoke:0x10F26CFB4 | system:True | depth:2 | sequence:149 |
para0 : kCFLocaleCountryCodeKey
return : CN
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CFD8 | system:True | depth:2 | sequence:151 |
para0 : -1945799864
para1 : region
return : region
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CFE0 | system:True | depth:2 | sequence:152 |
+[NSTimeZone systemTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922955C4 | text:0x182AED5C4 | invoke:0x10F26CFFC | system:True | depth:2 | sequence:154 |
return : Asia/Shanghai (GMT+8) offset 28800
-[__NSTimeZone name] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E33F4 | text:0x182B3B3F4 | invoke:0x10F26D014 | system:True | depth:2 | sequence:156 |
return : Asia/Shanghai
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D038 | system:True | depth:2 | sequence:158 |
para0 : Asia/Shanghai
para1 : tz_name
return : tz_name
+[NSTimeZone systemTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922955C4 | text:0x182AED5C4 | invoke:0x10F26D05C | system:True | depth:2 | sequence:161 |
return : Asia/Shanghai (GMT+8) offset 28800
-[__NSTimeZone secondsFromGMT] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E56A0 | text:0x182B3D6A0 | invoke:0x10F26D070 | system:True | depth:2 | sequence:163 |
return : 28800
+[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26D080 | system:True | depth:2 | sequence:164 |
para0 : 28800
return : 28800
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D0A4 | system:True | depth:2 | sequence:166 |
para0 : -1944448318
para1 : tz_offset
return : tz_offset
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D0AC | system:True | depth:2 | sequence:167 |
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D0C0 | system:False | depth:2 | sequence:169 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager currentAppLauguage] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA11BAC | text:0x10F269BAC | invoke:0x10F26D0D8 | system:False | depth:2 | sequence:171 |
return : zh
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D104 | system:True | depth:2 | sequence:174 |
para0 : -1944686648
para1 : app_language
return : app_language
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D110 | system:False | depth:2 | sequence:175 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager currentAppRegion] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA11C10 | text:0x10F269C10 | invoke:0x10F26D128 | system:False | depth:2 | sequence:177 |
return : CN
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D154 | system:True | depth:2 | sequence:180 |
para0 : -1945799864
para1 : app_region
return : app_region
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D160 | system:False | depth:2 | sequence:181 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager clientDID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115428B78 | text:0x105C80B78 | invoke:0x10F26D178 | system:False | depth:2 | sequence:183 |
return : 6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D19C | system:True | depth:2 | sequence:185 |
para0 : 6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6
para1 : cdid
return : cdid
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D1B8 | system:False | depth:2 | sequence:188 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager installID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115428874 | text:0x105C80874 | invoke:0x10F26D1D4 | system:False | depth:2 | sequence:190 |
return : 7321998383908030214
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D200 | system:False | depth:2 | sequence:194 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager installID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115428874 | text:0x105C80874 | invoke:0x10F26D214 | system:False | depth:2 | sequence:196 |
return : 7321998383908030214
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D238 | system:True | depth:2 | sequence:198 |
para0 : 7321998383908030214
para1 : install_id
return : install_id
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D270 | system:False | depth:2 | sequence:201 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager deviceID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115427038 | text:0x105C7F038 | invoke:0x10F26D28C | system:False | depth:2 | sequence:203 |
return : 7321996726894102022
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D2B4 | system:False | depth:2 | sequence:207 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager deviceID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115427038 | text:0x105C7F038 | invoke:0x10F26D2C8 | system:False | depth:2 | sequence:209 |
return : 7321996726894102022
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D2EC | system:True | depth:2 | sequence:211 |
para0 : 7321996726894102022
para1 : device_id
return : device_id
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D324 | system:False | depth:2 | sequence:214 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager dToken] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11550791C | text:0x105D5F91C | invoke:0x10F26D33C | system:False | depth:2 | sequence:216 |
return : 0
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D36C | system:True | depth:2 | sequence:218 |
para0 :
para1 : device_token
return : device_token
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D374 | system:True | depth:2 | sequence:219 |
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D390 | system:False | depth:2 | sequence:221 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager sceneStatus] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155078FC | text:0x105D5F8FC | invoke:0x10F26D3AC | system:False | depth:2 | sequence:223 |
return : 0
+[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26D3BC | system:True | depth:2 | sequence:224 |
para0 : 0
return : 0
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D3E0 | system:True | depth:2 | sequence:226 |
para0 : -1943907646
para1 : scene
return : scene
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D3E8 | system:True | depth:2 | sequence:227 |
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D3FC | system:False | depth:2 | sequence:229 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager sceneStatus] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155078FC | text:0x105D5F8FC | invoke:0x10F26D410 | system:False | depth:2 | sequence:231 |
return : 0
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D450 | system:False | depth:2 | sequence:233 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager isDisableIDFV] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507904 | text:0x105D5F904 | invoke:0x10F26D468 | system:False | depth:2 | sequence:235 |
return : 0
+[UIDevice currentDevice] </System/iOSSupport/System/Library/PrivateFrameworks/UIKitCore.framework/Versions/A/UIKitCore> | call_cnt:1 | impl:0x1BC35E564 | text:0x1ACBB6564 | invoke:0x10F26D4AC | system:True | depth:2 | sequence:237 |
return : <UIDevice: 0x6000095f8540>
-[UIDevice respondsToSelector:] </usr/lib/libobjc.A.dylib> | call_cnt:1 | impl:0x191E7FB04 | text:0x1826D7B04 | invoke:0x10F26D4CC | system:True | depth:2 | sequence:239 |
para0 : identifierForVendor
return : 1
+[BDIDFVPrivacyCertEntry getIDFVString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115873A38 | text:0x1060CBA38 | invoke:0x10F26D4F4 | system:False | depth:2 | sequence:241 |
return : B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D518 | system:True | depth:2 | sequence:243 |
para0 : B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC
para1 : vendor_id
return : vendor_id
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D52C | system:False | depth:2 | sequence:245 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager isDisableIDFA] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507910 | text:0x105D5F910 | invoke:0x10F26D544 | system:False | depth:2 | sequence:247 |
return : 0
+[BDIDFAPrivacyCertEntry getIDFAString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1158734EC | text:0x1060CB4EC | invoke:0x10F26D59C | system:False | depth:2 | sequence:249 |
return : 00000000-0000-0000-0000-000000000000
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D5C4 | system:True | depth:2 | sequence:251 |
para0 : 00000000-0000-0000-0000-000000000000
para1 : idfa
return : 1
+[TTInstallUtil authorizationStatus] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15D44 | text:0x10F26DD44 | invoke:0x10F26D5E0 | system:False | depth:2 | sequence:253 |
return : 0
+[NSNumber numberWithUnsignedInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193180F10 | text:0x1839D8F10 | invoke:0x10F26D5F4 | system:True | depth:2 | sequence:254 |
para0 : 0
return : 0
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D618 | system:True | depth:2 | sequence:256 |
para0 : -1943907646
para1 : auth_status
return : auth_status
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D620 | system:True | depth:2 | sequence:257 |
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D62C | system:False | depth:2 | sequence:258 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager customHeaderBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA12778 | text:0x10F26A778 | invoke:0x10F26D648 | system:False | depth:2 | sequence:260 |
return : <__NSMallocBlock__: 0x60000ccad740>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d88b8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
+[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D670 | system:False | depth:2 | sequence:264 |
return : <TTInstallIDManager: 0x100ae6d60>
-[TTInstallIDManager customHeaderBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA12778 | text:0x10F26A778 | invoke:0x10F26D684 | system:False | depth:2 | sequence:266 |
return : <__NSMallocBlock__: 0x60000ccad740>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d88b8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
___lldb_unnamed_symbol1059534 <DemoTTCore> | call_cnt:1 | impl:0x11C4D88B8 | text:0x10CD308B8 | invoke:0x10F26D698 | system:False | depth:2 | sequence:268 |
-[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D6CC | system:True | depth:2 | sequence:272 |
para0 : { "app_language" = zh; "app_region" = CN; "build_number" = 306019; "filter_warn" = 0; "is_kids_mode" = 0; "is_pad" = 1; "user_mode" = 0; "user_period" = 0; "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";}
para1 : custom
return : custom
NSClassFromString <Foundation> | call_cnt:1 | impl:0x1931745EC | text:0x1839CC5EC | invoke:0x10F26D6E0 | system:True | depth:2 | sequence:274 |
-[__NSDictionaryM copy] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922ACA08 | text:0x182B04A08 | invoke:0x10F26D79C | system:True | depth:2 | sequence:276 |
return : {
header = {
access = WIFI;
aid = 1180;
"app_language" = zh;
"app_name" = trill;
"app_region" = CN;
"app_version" = "30.6.0";
"auth_status" = 0;
carrier = "";
"carrier_region" = "";
cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
channel = "App Store";
custom = {
"app_language" = zh;
"app_region" = CN;
"build_number" = 306019;
"filter_warn" = 0;
"is_kids_mode" = 0;
"is_pad" = 1;
"user_mode" = 0;
"user_period" = 0;
"web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
};
"device_id" = 7321996726894102022;
"device_model" = arm64;
"device_token" = "";
"display_name" = DemoTT;
idfa = "00000000-0000-0000-0000-000000000000";
"install_id" = 7321998383908030214;
"is_jailbroken" = 0;
"is_upgrade_user" = 0;
language = "zh-Hans-CN";
"mcc_mnc" = "";
"model_display_name" = arm64;
os = iOS;
"os_version" = "16.3";
package = "com.ss.iphone.ugc.Ame";
region = CN;
resolution = "2560*1440";
scene = 0;
"sdk_version" = 272;
timezone = 8;
"tz_name" = "Asia/Shanghai";
"tz_offset" = 28800;
"user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
"vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
};
"magic_tag" = "ss_app_log";
}
-[__NSPlaceholderDictionary initWithDictionary:copyItems:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922815FC | text:0x182AD95FC | invoke:0x10F26D7B8 | system:True | depth:2 | sequence:277 |
para0 : { header = { access = WIFI; aid = 1180; "app_language" = zh; "app_name" = trill; "app_region" = CN; "app_version" = "30.6.0"; "auth_status" = 0; carrier = ""; "carrier_region" = ""; cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6"; channel = "App Store"; custom = { "app_language" = zh; "app_region" = CN; "build_number" = 306019; "filter_warn" = 0; "is_kids_mode" = 0; "is_pad" = 1; "user_mode" = 0; "user_period" = 0; "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148"; }; "device_id" = 7321996726894102022; "device_model" = arm64; "device_token" = ""; "display_name" = DemoTT; idfa = "00000000-0000-0000-0000-000000000000"; "install_id" = 7321998383908030214; "is_jailbroken" = 0; "is_upgrade_user" = 0; language = "zh-Hans-CN"; "mcc_mnc" = ""; "model_display_name" = arm64; os = iOS; "os_version" = "16.3"; package = "com.ss.iphone.ugc.Ame"; region = CN; resolution = "2560*1440"; scene = 0; "sdk_version" = 272; timezone = 8; "tz_name" = "Asia/Shanghai"; "tz_offset" = 28800; "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet"; "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC"; }; "magic_tag" = "ss_app_log";}
para1 : 1
return : {
header = {
access = WIFI;
aid = 1180;
"app_language" = zh;
"app_name" = trill;
"app_region" = CN;
"app_version" = "30.6.0";
"auth_status" = 0;
carrier = "";
"carrier_region" = "";
cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
channel = "App Store";
custom = {
"app_language" = zh;
"app_region" = CN;
"build_number" = 306019;
"filter_warn" = 0;
"is_kids_mode" = 0;
"is_pad" = 1;
"user_mode" = 0;
"user_period" = 0;
"web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
};
"device_id" = 7321996726894102022;
"device_model" = arm64;
"device_token" = "";
"display_name" = DemoTT;
idfa = "00000000-0000-0000-0000-000000000000";
"install_id" = 7321998383908030214;
"is_jailbroken" = 0;
"is_upgrade_user" = 0;
language = "zh-Hans-CN";
"mcc_mnc" = "";
"model_display_name" = arm64;
os = iOS;
"os_version" = "16.3";
package = "com.ss.iphone.ugc.Ame";
region = CN;
resolution = "2560*1440";
scene = 0;
"sdk_version" = 272;
timezone = 8;
"tz_name" = "Asia/Shanghai";
"tz_offset" = 28800;
"user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
"vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
};
"magic_tag" = "ss_app_log";
}
-[NSRecursiveLock unlock] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317CAFC | text:0x1839D4AFC | invoke:0x10F26D7D8 | system:True | depth:2 | sequence:279 |
return : 0
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D7E0 | system:True | depth:2 | sequence:280 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D7E8 | system:True | depth:2 | sequence:281 |
}
+[NSDictionary dictionaryWithDictionary:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922C8884 | text:0x182B20884 | invoke:0x10F268624 | system:True | depth:1 | sequence:3 |
para0 : { header = { access = WIFI; aid = 1180; "app_language" = zh; "app_name" = trill; "app_region" = CN; "app_version" = "30.6.0"; "auth_status" = 0; carrier = ""; "carrier_region" = ""; cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6"; channel = "App Store"; custom = { "app_language" = zh; "app_region" = CN; "build_number" = 306019; "filter_warn" = 0; "is_kids_mode" = 0; "is_pad" = 1; "user_mode" = 0; "user_period" = 0; "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148"; }; "device_id" = 7321996726894102022; "device_model" = arm64; "device_token" = ""; "display_name" = DemoTT; idfa = "00000000-0000-0000-0000-000000000000"; "install_id" = 7321998383908030214; "is_jailbroken" = 0; "is_upgrade_user" = 0; language = "zh-Hans-CN"; "mcc_mnc" = ""; "model_display_name" = arm64; os = iOS; "os_version" = "16.3"; package = "com.ss.iphone.ugc.Ame"; region = CN; resolution = "2560*1440"; scene = 0; "sdk_version" = 272; timezone = 8; "tz_name" = "Asia/Shanghai"; "tz_offset" = 28800; "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet"; "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC"; }; "magic_tag" = "ss_app_log";}
return : {
header = {
access = WIFI;
aid = 1180;
"app_language" = zh;
"app_name" = trill;
"app_region" = CN;
"app_version" = "30.6.0";
"auth_status" = 0;
carrier = "";
"carrier_region" = "";
cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
channel = "App Store";
custom = {
"app_language" = zh;
"app_region" = CN;
"build_number" = 306019;
"filter_warn" = 0;
"is_kids_mode" = 0;
"is_pad" = 1;
"user_mode" = 0;
"user_period" = 0;
"web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
};
"device_id" = 7321996726894102022;
"device_model" = arm64;
"device_token" = "";
"display_name" = DemoTT;
idfa = "00000000-0000-0000-0000-000000000000";
"install_id" = 7321998383908030214;
"is_jailbroken" = 0;
"is_upgrade_user" = 0;
language = "zh-Hans-CN";
"mcc_mnc" = "";
"model_display_name" = arm64;
os = iOS;
"os_version" = "16.3";
package = "com.ss.iphone.ugc.Ame";
region = CN;
resolution = "2560*1440";
scene = 0;
"sdk_version" = 272;
timezone = 8;
"tz_name" = "Asia/Shanghai";
"tz_offset" = 28800;
"user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
"vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
};
"magic_tag" = "ss_app_log";
}
-[TTInstallIDManager configParams] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA120FC | text:0x10F26A0FC | invoke:0x10F268658 | system:False | depth:1 | sequence:6 |
return : {
"activate_url_string" = "https://log.DemoTTv.com/service/2/app_alert_check/";
"backup_device_id" = 7321996726894102022;
"need_encrypt" = 1;
"register_url_string" = "https://log.DemoTTv.com/service/2/device_register/";
}
{
-[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A11C | system:False | depth:2 | sequence:1 |
return : <__NSMallocBlock__: 0x60000ccad800>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
-[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A13C | system:False | depth:2 | sequence:4 |
return : <__NSMallocBlock__: 0x60000ccad800>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
___lldb_unnamed_symbol1059500 <DemoTTCore> | call_cnt:1 | impl:0x11C4D75FC | text:0x10CD2F5FC | invoke:0x10F26A150 | system:False | depth:2 | sequence:6 |
}
-[__NSFrozenDictionaryM ttinstall_stringValueForKey:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0EEE8 | text:0x10F266EE8 | invoke:0x10F268678 | system:False | depth:1 | sequence:8 |
para0 : register_url_string
return : https://log.DemoTTv.com/service/2/device_register/
{
-[__NSFrozenDictionaryM ttinstall_stringValueForKey:defaultValue:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0EEF8 | text:0x10F266EF8 | invoke:0x11244D244 | system:False | depth:2 | sequence:1 |
para0 : register_url_string
para1 : 0
}
___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F2686A0 | system:False | depth:1 | sequence:11 |
-[__NSCFConstantString containsString:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193195EB4 | text:0x1839EDEB4 | invoke:0x10F2686B8 | system:True | depth:1 | sequence:12 |
para0 : ?
return : 0
-[__NSCFConstantString stringByAppendingString:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317EAC8 | text:0x1839D6AC8 | invoke:0x10F2686D4 | system:True | depth:1 | sequence:13 |
para0 : ?
return : https://log.DemoTTv.com/service/2/device_register/?
-[TTInstallIDManager configParams] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA120FC | text:0x10F26A0FC | invoke:0x10F2686F8 | system:False | depth:1 | sequence:16 |
return : {
"activate_url_string" = "https://log.DemoTTv.com/service/2/app_alert_check/";
"backup_device_id" = 7321996726894102022;
"need_encrypt" = 1;
"register_url_string" = "https://log.DemoTTv.com/service/2/device_register/";
}
{
-[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A11C | system:False | depth:2 | sequence:1 |
return : <__NSMallocBlock__: 0x60000ccad800>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
-[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A13C | system:False | depth:2 | sequence:4 |
return : <__NSMallocBlock__: 0x60000ccad800>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
___lldb_unnamed_symbol1059500 <DemoTTCore> | call_cnt:1 | impl:0x11C4D75FC | text:0x10CD2F5FC | invoke:0x10F26A150 | system:False | depth:2 | sequence:6 |
}
-[__NSFrozenDictionaryM objectForKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x19228577C | text:0x182ADD77C | invoke:0x10F268718 | system:True | depth:1 | sequence:18 |
para0 : need_encrypt
return : 1
-[TTInstallIDManager configParams] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA120FC | text:0x10F26A0FC | invoke:0x10F268740 | system:False | depth:1 | sequence:22 |
return : {
"activate_url_string" = "https://log.DemoTTv.com/service/2/app_alert_check/";
"backup_device_id" = 7321996726894102022;
"need_encrypt" = 1;
"register_url_string" = "https://log.DemoTTv.com/service/2/device_register/";
}
{
-[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A11C | system:False | depth:2 | sequence:1 |
return : <__NSMallocBlock__: 0x60000ccad800>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
-[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A13C | system:False | depth:2 | sequence:4 |
return : <__NSMallocBlock__: 0x60000ccad800>
signature: "@"NSDictionary"8@?0"
invoke : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
___lldb_unnamed_symbol1059500 <DemoTTCore> | call_cnt:1 | impl:0x11C4D75FC | text:0x10CD2F5FC | invoke:0x10F26A150 | system:False | depth:2 | sequence:6 |
}
-[__NSFrozenDictionaryM ttinstall_boolValueForKey:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0F12C | text:0x10F26712C | invoke:0x10F268760 | system:False | depth:1 | sequence:24 |
para0 : need_encrypt
return : 1
{
-[__NSFrozenDictionaryM ttinstall_boolValueForKey:defaultValue:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0F13C | text:0x10F26713C | invoke:0x11244D244 | system:False | depth:2 | sequence:1 |
para0 : need_encrypt
para1 : 0
}
-[TTInstallIDManager deviceID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115427038 | text:0x105C7F038 | invoke:0x10F268784 | system:False | depth:1 | sequence:26 |
return : 7321996726894102022
{
-[TTInstallIDManager fetchRealID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11542719C | text:0x105C7F19C | invoke:0x105C7F05C | system:False | depth:2 | sequence:1 |
return : 0
<> | call_cnt:1 | impl:0x11CFBBF80 | text:0x10D813F80 | invoke:0x105C7F06C | system:True | depth:2 | sequence:3 |
pthread_mutex_lock <libsystem_pthread.dylib> | call_cnt:1 | impl:0x1002C0380 | text:0xF0B18380 | invoke:0x105C7F0AC | system:True | depth:2 | sequence:4 |
pthread_mutex_unlock <libsystem_pthread.dylib> | call_cnt:1 | impl:0x1002C0124 | text:0xF0B18124 | invoke:0x105C7F104 | system:True | depth:2 | sequence:6 |
}
-[TTInstallIDManager isDeviceActivated] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA117A8 | text:0x10F2697A8 | invoke:0x10F2687B0 | system:False | depth:1 | sequence:28 |
return : 0
{
+[NSUserDefaults standardUserDefaults] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193179360 | text:0x1839D1360 | invoke:0x10F2697D8 | system:True | depth:2 | sequence:1 |
return : <NSUserDefaults: 0x600000c0d0e0>
-[NSUserDefaults stringForKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317C67C | text:0x1839D467C | invoke:0x10F2697FC | system:True | depth:2 | sequence:3 |
para0 : kTTInstallServiceChannel
return : App Store
+[NSUserDefaults standardUserDefaults] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193179360 | text:0x1839D1360 | invoke:0x10F26981C | system:True | depth:2 | sequence:6 |
return : <NSUserDefaults: 0x600000c0d0e0>
-[NSUserDefaults stringForKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317C67C | text:0x1839D467C | invoke:0x10F269838 | system:True | depth:2 | sequence:8 |
para0 : kTTInstallServiceAppVersion
return : 30.6.0
+[NSUserDefaults standardUserDefaults] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193179360 | text:0x1839D1360 | invoke:0x10F269858 | system:True | depth:2 | sequence:11 |
return : <NSUserDefaults: 0x600000c0d0e0>
-[NSUserDefaults boolForKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317B494 | text:0x1839D3494 | invoke:0x10F269878 | system:True | depth:2 | sequence:13 |
para0 : kTTInstallServiceIsActivated
return : 0
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F269918 | system:True | depth:2 | sequence:15 |
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F269920 | system:True | depth:2 | sequence:16 |
}
-[TTInstallIDManager appID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11550788C | text:0x105D5F88C | invoke:0x10F2687C4 | system:False | depth:1 | sequence:29 |
return : 1180
{
objc_getProperty <libobjc.A.dylib> | call_cnt:1 | impl:0x191E84488 | text:0x1826DC488 | invoke:0x11244D1FC | system:True | depth:2 | sequence:1 |
}
-[__NSCFString stringByAppendingFormat:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317DC24 | text:0x1839D5C24 | invoke:0x10F2687F4 | system:True | depth:1 | sequence:31 |
para0 : device_id=%@&is_activated=%d&aid=%@
return : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180
<> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F268810 | system:True | depth:1 | sequence:34 |
-[__NSCFString stringByAppendingString:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317EAC8 | text:0x1839D6AC8 | invoke:0x10F268830 | system:True | depth:1 | sequence:36 |
para0 : &tt_data=a
return : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
-[__NSCFString stringByAddingPercentEscapesUsingEncoding:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1932718E0 | text:0x183AC98E0 | invoke:0x10F26885C | system:True | depth:1 | sequence:39 |
para0 : 4
return : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
dispatch_async <libdispatch.dylib> | call_cnt:1 | impl:0x1006FC68C | text:0xF0F5468C | invoke:0x10F2688BC | system:True | depth:1 | sequence:43 |
para0 : <__NSStackBlock__: 0x16ff9e7c0> signature: "v8@?0" invoke : 0x11ea10a20 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain) copy : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain) dispose : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
objc_initWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85864 | text:0x1826DD864 | invoke:0x10F2688C8 | system:True | depth:1 | sequence:44 |
+[TTNetworkManager shareInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11542A7C4 | text:0x105C827C4 | invoke:0x10F2688DC | system:False | depth:1 | sequence:45 |
return : <TTNetworkManagerChromium: 0x1025b8990>
{
+[TTNetworkManagerChromium shareInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11542A7D8 | text:0x105C827D8 | invoke:0x11244D244 | system:False | depth:2 | sequence:1 |
}
+[TTTInstallIDPostDataHttpRequestSerializer class] </usr/lib/libobjc.A.dylib> | call_cnt:1 | impl:0x191E7BE2C | text:0x1826D3E2C | invoke:0x10F268900 | system:True | depth:1 | sequence:47 |
return : TTTInstallIDPostDataHttpRequestSerializer
+[TTHTTPJSONResponseSerializerBase class] </usr/lib/libobjc.A.dylib> | call_cnt:1 | impl:0x191E7BE2C | text:0x1826D3E2C | invoke:0x10F268914 | system:True | depth:1 | sequence:48 |
return : TTHTTPJSONResponseSerializerBase
objc_copyWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85AB8 | text:0x1826DDAB8 | invoke:0x10F268948 | system:True | depth:1 | sequence:49 |
-[TTNetworkManagerChromium requestForJSONWithURL:params:method:needCommonParams:requestSerializer:responseSerializer:autoResume:callback:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155BC840 | text:0x105E14840 | invoke:0x10F268990 | system:False | depth:1 | sequence:51 |
para0 : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
para1 : { header = { access = WIFI; aid = 1180; "app_language" = zh; "app_name" = trill; "app_region" = CN; "app_version" = "30.6.0"; "auth_status" = 0; carrier = ""; "carrier_region" = ""; cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6"; channel = "App Store"; custom = { "app_language" = zh; "app_region" = CN; "build_number" = 306019; "filter_warn" = 0; "is_kids_mode" = 0; "is_pad" = 1; "user_mode" = 0; "user_period" = 0; "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148"; }; "device_id" = 7321996726894102022; "device_model" = arm64; "device_token" = ""; "display_name" = DemoTT; idfa = "00000000-0000-0000-0000-000000000000"; "install_id" = 7321998383908030214; "is_jailbroken" = 0; "is_upgrade_user" = 0; language = "zh-Hans-CN"; "mcc_mnc" = ""; "model_display_name" = arm64; os = iOS; "os_version" = "16.3"; package = "com.ss.iphone.ugc.Ame"; region = CN; resolution = "2560*1440"; scene = 0; "sdk_version" = 272; timezone = 8; "tz_name" = "Asia/Shanghai"; "tz_offset" = 28800; "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet"; "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC"; }; "magic_tag" = "ss_app_log";}
para2 : POST
para3 : 1
para4 : TTTInstallIDPostDataHttpRequestSerializer
para5 : TTHTTPJSONResponseSerializerBase
return : <TTHttpTaskChromium: 0x127084840>
{
-[TTNetworkManagerChromium callback_dispatch_queue] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155BC99C | text:0x105E1499C | invoke:0x105E148BC | system:False | depth:2 | sequence:5 |
return : <OS_dispatch_queue_main: com.apple.main-thread[0x100768d40] = { xref = -2147483648, ref = -2147483648, sref = 1, target = com.apple.root.default-qos.overcommit[0x100769340], width = 0x1, state = 0x001ffe9e00000100, dirty, max qos 6, in-flight = 0, thread = 0x103 }>
-[TTNetworkManagerChromium requestForJSONWithURL_:params:method:needCommonParams:headerField:requestSerializer:responseSerializer:autoResume:verifyRequest:isCustomizedCookie:callback:callbackWithResponse:dispatch_queue:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155BC9AC | text:0x105E149AC | invoke:0x105E14904 | system:False | depth:2 | sequence:7 |
para0 : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
para1 : { header = { access = WIFI; aid = 1180; "app_language" = zh; "app_name" = trill; "app_region" = CN; "app_version" = "30.6.0"; "auth_status" = 0; carrier = ""; "carrier_region" = ""; cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6"; channel = "App Store"; custom = { "app_language" = zh; "app_region" = CN; "build_number" = 306019; "filter_warn" = 0; "is_kids_mode" = 0; "is_pad" = 1; "user_mode" = 0; "user_period" = 0; "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148"; }; "device_id" = 7321996726894102022; "device_model" = arm64; "device_token" = ""; "display_name" = DemoTT; idfa = "00000000-0000-0000-0000-000000000000"; "install_id" = 7321998383908030214; "is_jailbroken" = 0; "is_upgrade_user" = 0; language = "zh-Hans-CN"; "mcc_mnc" = ""; "model_display_name" = arm64; os = iOS; "os_version" = "16.3"; package = "com.ss.iphone.ugc.Ame"; region = CN; resolution = "2560*1440"; scene = 0; "sdk_version" = 272; timezone = 8; "tz_name" = "Asia/Shanghai"; "tz_offset" = 28800; "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet"; "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC"; }; "magic_tag" = "ss_app_log";}
para2 : POST
para3 : 1
para4 : 0
para5 : TTTInstallIDPostDataHttpRequestSerializer
return : <TTHttpTaskChromium: 0x127084840>
}
objc_destroyWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85B04 | text:0x1826DDB04 | invoke:0x10F2689B4 | system:True | depth:1 | sequence:56 |
objc_destroyWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85B04 | text:0x1826DDB04 | invoke:0x10F2689BC | system:True | depth:1 | sequence:57 |
}[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
最后于 2024-3-4 18:55
被ttxx编辑
，原因：
赞赏
|
|
|---|---|
|
|
选的这个接口没调用太多的C层函数，主要集中在OC层，但trace是支持C层函数的，也包括svc指令。输出中存在部分无名函数<>，那是应用自身的跳板函数混淆手段，通过对某几条汇编指令重新封装为一个小函数，增加混淆复杂度，但这种函数的本质并无太大意义，因此无符号。
|
|
|
一般的ollvm混淆在trace过滤后就能得到很清晰的调用链路，函数逻辑基本能恢复个七七八八，但同样也有不足，不能很好处理计算和内存读写逻辑。
最后于 2024-3-4 18:56
被ttxx编辑
，原因：
|
|
|
感谢分享
|
|
|
赞赏
雪币:
留言:
