方法调用链路还原效果展示【仅学习】

这是我对某个应用的trace效果展示,先是挑选了一些敏感的url,接着定位到报文发送的入口,选了堆栈中最顶层的一个入口,接着进行trace。限制了递归的深度为2层(支持完全递归的trace),方便展示效果,支持对OC层以及C层函数的入参和返回值的输出,最终打印效果和函数调用链路保持一致。一眼看过去,感觉这个接口的逻辑还是挺简单的,但是如果看ida的话就全被混淆了。

选的这个接口没调用太多的C层函数,主要集中在OC层,但trace是支持C层函数的,也包括svc指令。输出中存在部分无名函数<>,那是由于应用自身的跳板函数混淆手段,通过对某几条汇编指令重新封装为一个小函数,增加混淆复杂度,但这种函数的本质并无太大意义,因此无符号。

一般的ollvm混淆在trace过滤后就能得到很清晰的调用链路,函数逻辑基本能恢复个七七八八,但同样也有不足,不能很好处理计算和内存读写逻辑。

{
+[TTInstallUtil onTheFlyParameter] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA144F0 | text:0x10F26C4F0 | invoke:0x10F2685D0 | system:False | depth:1 | sequence:1 |
        return : {
            header =     {
                access = WIFI;
                aid = 1180;
                "app_language" = zh;
                "app_name" = trill;
                "app_region" = CN;
                "app_version" = "30.6.0";
                "auth_status" = 0;
                carrier = "";
                "carrier_region" = "";
                cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
                channel = "App Store";
                custom =         {
                    "app_language" = zh;
                    "app_region" = CN;
                    "build_number" = 306019;
                    "filter_warn" = 0;
                    "is_kids_mode" = 0;
                    "is_pad" = 1;
                    "user_mode" = 0;
                    "user_period" = 0;
                    "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
                };
                "device_id" = 7321996726894102022;
                "device_model" = arm64;
                "device_token" = "";
                "display_name" = DemoTT;
                idfa = "00000000-0000-0000-0000-000000000000";
                "install_id" = 7321998383908030214;
                "is_jailbroken" = 0;
                "is_upgrade_user" = 0;
                language = "zh-Hans-CN";
                "mcc_mnc" = "";
                "model_display_name" = arm64;
                os = iOS;
                "os_version" = "16.3";
                package = "com.ss.iphone.ugc.Ame";
                region = CN;
                resolution = "2560*1440";
                scene = 0;
                "sdk_version" = 272;
                timezone = 8;
                "tz_name" = "Asia/Shanghai";
                "tz_offset" = 28800;
                "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
                "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
            };
            "magic_tag" = "ss_app_log";
        }
{
    -[NSRecursiveLock lock] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317BB84 | text:0x1839D3B84 | invoke:0x10F26C524 | system:True | depth:2 | sequence:1 |
            return : 6173618176
    +[NSMutableDictionary dictionaryWithCapacity:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922DEBAC | text:0x182B36BAC | invoke:0x10F26C594 | system:True | depth:2 | sequence:2 |
            para0 : 20
            return : {
            }
    +[TTInstallSandBoxHelper bundleIdentifier] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA13770 | text:0x10F26B770 | invoke:0x10F26C5B8 | system:False | depth:2 | sequence:4 |
            return : com.ss.iphone.ugc.Ame
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C5E4 | system:True | depth:2 | sequence:6 |
            para0 : com.ss.iphone.ugc.Ame
            para1 : package
            return : package
    +[TTInstallSandBoxHelper versionName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507898 | text:0x105D5F898 | invoke:0x10F26C5FC | system:False | depth:2 | sequence:8 |
            return : 30.6.0
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C620 | system:True | depth:2 | sequence:10 |
            para0 : -1690678424
            para1 : app_version
            return : app_version
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C628 | system:True | depth:2 | sequence:11 |
    +[TTInstallUtil isJailBroken] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15BF8 | text:0x10F26DBF8 | invoke:0x10F26C63C | system:False | depth:2 | sequence:12 |
            return : 0
    +[NSNumber numberWithBool:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931A2C98 | text:0x1839FAC98 | invoke:0x10F26C654 | system:True | depth:2 | sequence:13 |
            para0 : 0
            return : 0
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C678 | system:True | depth:2 | sequence:15 |
            para0 : 0
            para1 : is_jailbroken
            return : is_jailbroken
    +[TTReachability primaryCarrierCarrierName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59CCC | text:0x10F6B1CCC | invoke:0x10F26C690 | system:False | depth:2 | sequence:17 |
            return : 0
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C6B8 | system:True | depth:2 | sequence:19 |
            para0 : 
            para1 : carrier
            return : carrier
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C6C0 | system:True | depth:2 | sequence:20 |
    +[TTReachability primaryCarrierIsoCountryCode] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59CE8 | text:0x10F6B1CE8 | invoke:0x10F26C6D0 | system:False | depth:2 | sequence:21 |
            return : 0
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C6F8 | system:True | depth:2 | sequence:23 |
            para0 : 
            para1 : carrier_region
            return : carrier_region
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C700 | system:True | depth:2 | sequence:24 |
    +[TTReachability primaryCarrierMobileCountryCode] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59D04 | text:0x10F6B1D04 | invoke:0x10F26C710 | system:False | depth:2 | sequence:25 |
            return : 0
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C734 | system:True | depth:2 | sequence:28 |
    +[TTReachability primaryCarrierMobileNetworkCode] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EE59D20 | text:0x10F6B1D20 | invoke:0x10F26C744 | system:False | depth:2 | sequence:29 |
            return : 0
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C768 | system:True | depth:2 | sequence:32 |
    +[NSString stringWithFormat:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19318C198 | text:0x1839E4198 | invoke:0x10F26C78C | system:True | depth:2 | sequence:33 |
            para0 : %@%@
            return : <object returned empty description>
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C7B0 | system:True | depth:2 | sequence:35 |
            para0 : 
            para1 : mcc_mnc
            return : mcc_mnc
    +[TTReachability currentConnectionMethodName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1154283B8 | text:0x105C803B8 | invoke:0x10F26C7CC | system:False | depth:2 | sequence:37 |
            return : WIFI
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C7F4 | system:True | depth:2 | sequence:39 |
            para0 : WIFI
            para1 : access
            return : access
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C818 | system:True | depth:2 | sequence:41 |
            para0 : iOS
            para1 : os
            return : os
    +[TTInstallSandBoxHelper appDisplayName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1366C | text:0x10F26B66C | invoke:0x10F26C82C | system:False | depth:2 | sequence:42 |
            return : DemoTT
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C850 | system:True | depth:2 | sequence:44 |
            para0 : -1181288216
            para1 : display_name
            return : display_name
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C858 | system:True | depth:2 | sequence:45 |
    +[UIDevice currentDevice] </System/iOSSupport/System/Library/PrivateFrameworks/UIKitCore.framework/Versions/A/UIKitCore> | call_cnt:1 | impl:0x1BC35E564 | text:0x1ACBB6564 | invoke:0x10F26C86C | system:True | depth:2 | sequence:46 |
            return : <UIDevice: 0x6000095f8540>
    -[UIDevice systemVersion] </System/iOSSupport/System/Library/PrivateFrameworks/UIKitCore.framework/Versions/A/UIKitCore> | call_cnt:1 | impl:0x1BC388E80 | text:0x1ACBE0E80 | invoke:0x10F26C884 | system:True | depth:2 | sequence:48 |
            return : 16.3
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C8A8 | system:True | depth:2 | sequence:50 |
            para0 : 456739448
            para1 : os_version
            return : os_version
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C8B0 | system:True | depth:2 | sequence:51 |
    +[TTInstallUtil platform] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15CAC | text:0x10F26DCAC | invoke:0x10F26C8CC | system:False | depth:2 | sequence:53 |
            return : arm64
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26C8F8 | system:True | depth:2 | sequence:55 |
            para0 : -1164221840
            para1 : device_model
            return : device_model
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C900 | system:True | depth:2 | sequence:56 |
    +[TTInstallUtil platform] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15CAC | text:0x10F26DCAC | invoke:0x10F26C90C | system:False | depth:2 | sequence:57 |
            return : arm64
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26C930 | system:True | depth:2 | sequence:59 |
            para0 : -1164221840
            para1 : model_display_name
            return : model_display_name
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C938 | system:True | depth:2 | sequence:60 |
    +[NSLocale preferredLanguages] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922D58E0 | text:0x182B2D8E0 | invoke:0x10F26C94C | system:True | depth:2 | sequence:61 |
            return : <__NSArrayM 0x600000e1bbd0>(
            zh-Hans-CN,
            en-CN
            )
    -[__NSArrayM objectAtIndex:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x19226595C | text:0x182ABD95C | invoke:0x10F26C968 | system:True | depth:2 | sequence:63 |
            para0 : 0
            return : zh-Hans-CN
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26C990 | system:True | depth:2 | sequence:65 |
            para0 : zh-Hans-CN
            para1 : language
            return : language
    +[NSNumber numberWithUnsignedInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193180F10 | text:0x1839D8F10 | invoke:0x10F26C9B4 | system:True | depth:2 | sequence:68 |
            para0 : 272
            return : 272
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26C9DC | system:True | depth:2 | sequence:70 |
            para0 : -1943872830
            para1 : sdk_version
            return : sdk_version
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26C9E4 | system:True | depth:2 | sequence:71 |
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26C9F8 | system:False | depth:2 | sequence:72 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager channel] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507874 | text:0x105D5F874 | invoke:0x10F26CA10 | system:False | depth:2 | sequence:74 |
            return : App Store
     <> | call_cnt:1 | impl:0x121BF5284 | text:0x11244D284 | invoke:0x10F26CA28 | system:True | depth:2 | sequence:76 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CA5C | system:True | depth:2 | sequence:77 |
    ___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F26CA78 | system:False | depth:2 | sequence:79 |
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CA90 | system:True | depth:2 | sequence:80 |
            para0 : -2076511600
            para1 : channel
            return : channel
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26CA9C | system:False | depth:2 | sequence:81 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager appID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11550788C | text:0x105D5F88C | invoke:0x10F26CAB4 | system:False | depth:2 | sequence:83 |
            return : 1180
     <> | call_cnt:1 | impl:0x121BF5284 | text:0x11244D284 | invoke:0x10F26CAD0 | system:True | depth:2 | sequence:85 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CAF8 | system:True | depth:2 | sequence:86 |
    ___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F26CB14 | system:False | depth:2 | sequence:88 |
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CB30 | system:True | depth:2 | sequence:89 |
            para0 : -1875195272
            para1 : aid
            return : aid
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26CB3C | system:False | depth:2 | sequence:90 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager appName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507880 | text:0x105D5F880 | invoke:0x10F26CB58 | system:False | depth:2 | sequence:92 |
            return : trill
     <> | call_cnt:1 | impl:0x121BF5284 | text:0x11244D284 | invoke:0x10F26CB70 | system:True | depth:2 | sequence:94 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CB94 | system:True | depth:2 | sequence:95 |
    ___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F26CBB0 | system:False | depth:2 | sequence:97 |
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CBD0 | system:True | depth:2 | sequence:98 |
            para0 : -1197774608
            para1 : app_name
            return : app_name
    +[NSTimeZone localTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E5630 | text:0x182B3D630 | invoke:0x10F26CBE8 | system:True | depth:2 | sequence:99 |
            return : Local Time Zone (Asia/Shanghai (GMT+8) offset 28800)
    -[__NSLocalTimeZoneI secondsFromGMT] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E56A0 | text:0x182B3D6A0 | invoke:0x10F26CC04 | system:True | depth:2 | sequence:101 |
            return : 28800
    +[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26CC44 | system:True | depth:2 | sequence:103 |
            para0 : 8
            return : 8
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26CC68 | system:True | depth:2 | sequence:105 |
            para0 : -1943906622
            para1 : timezone
            return : timezone
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CC70 | system:True | depth:2 | sequence:106 |
    +[TTHTTPRequestSerializerBase serializer] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11ECCA48C | text:0x10F52248C | invoke:0x10F26CC84 | system:False | depth:2 | sequence:107 |
            return : <TTHTTPRequestSerializerBase: 0x600000065370>
    -[TTHTTPRequestSerializerBase userAgentString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11ECCA7CC | text:0x10F5227CC | invoke:0x10F26CC9C | system:False | depth:2 | sequence:109 |
            return : DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CCC4 | system:True | depth:2 | sequence:111 |
            para0 : DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet
            para1 : user_agent
            return : user_agent
    +[TTInstallUtil resolutionString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15B1C | text:0x10F26DB1C | invoke:0x10F26CCE8 | system:False | depth:2 | sequence:114 |
            return : 2560*1440
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26CD18 | system:True | depth:2 | sequence:116 |
            para0 : 2560*1440
            para1 : resolution
            return : resolution
    +[TTInstallUtil isUpgradeUser] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507BAC | text:0x105D5FBAC | invoke:0x10F26CD34 | system:False | depth:2 | sequence:118 |
            return : 0
    +[NSNumber numberWithBool:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931A2C98 | text:0x1839FAC98 | invoke:0x10F26CD44 | system:True | depth:2 | sequence:119 |
            para0 : 0
            return : 0
    -[__NSDictionaryM setObject:forKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192280DCC | text:0x182AD8DCC | invoke:0x10F26CD68 | system:True | depth:2 | sequence:121 |
            para0 : 0
            para1 : is_upgrade_user
            return : is_upgrade_user
    NSClassFromString <Foundation> | call_cnt:1 | impl:0x1931745EC | text:0x1839CC5EC | invoke:0x10F26CD7C | system:True | depth:2 | sequence:123 |
    -[__NSPlaceholderDictionary initWithObjectsAndKeys:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x19228C50C | text:0x182AE450C | invoke:0x10F26CE48 | system:True | depth:2 | sequence:125 |
            para0 : ss_app_log
            return : {
                header =     {
                    access = WIFI;
                    aid = 1180;
                    "app_name" = trill;
                    "app_version" = "30.6.0";
                    carrier = "";
                    "carrier_region" = "";
                    channel = "App Store";
                    "device_model" = arm64;
                    "display_name" = DemoTT;
                    "is_jailbroken" = 0;
                    "is_upgrade_user" = 0;
                    language = "zh-Hans-CN";
                    "mcc_mnc" = "";
                    "model_display_name" = arm64;
                    os = iOS;
                    "os_version" = "16.3";
                    package = "com.ss.iphone.ugc.Ame";
                    resolution = "2560*1440";
                    "sdk_version" = 272;
                    timezone = 8;
                    "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
                };
                "magic_tag" = "ss_app_log";
            }
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE5C | system:True | depth:2 | sequence:126 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE64 | system:True | depth:2 | sequence:127 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE6C | system:True | depth:2 | sequence:128 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CE74 | system:True | depth:2 | sequence:129 |
    -[__NSDictionaryM objectForKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192265CBC | text:0x182ABDCBC | invoke:0x10F26CEB4 | system:True | depth:2 | sequence:133 |
            para0 : header
            return : {
                access = WIFI;
                aid = 1180;
                "app_name" = trill;
                "app_version" = "30.6.0";
                carrier = "";
                "carrier_region" = "";
                channel = "App Store";
                "device_model" = arm64;
                "display_name" = DemoTT;
                "is_jailbroken" = 0;
                "is_upgrade_user" = 0;
                language = "zh-Hans-CN";
                "mcc_mnc" = "";
                "model_display_name" = arm64;
                os = iOS;
                "os_version" = "16.3";
                package = "com.ss.iphone.ugc.Ame";
                resolution = "2560*1440";
                "sdk_version" = 272;
                timezone = 8;
                "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
            }
    +[TTReachability currentConnectionMethodName] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1154283B8 | text:0x105C803B8 | invoke:0x10F26CED0 | system:False | depth:2 | sequence:135 |
            return : WIFI
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CEF4 | system:True | depth:2 | sequence:137 |
            para0 : WIFI
            para1 : access
            return : WIFI
    +[NSTimeZone localTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E5630 | text:0x182B3D630 | invoke:0x10F26CF0C | system:True | depth:2 | sequence:139 |
            return : Local Time Zone (Asia/Shanghai (GMT+8) offset 28800)
    -[__NSLocalTimeZoneI secondsFromGMT] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E56A0 | text:0x182B3D6A0 | invoke:0x10F26CF20 | system:True | depth:2 | sequence:141 |
            return : 28800
    +[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26CF54 | system:True | depth:2 | sequence:143 |
            para0 : 8
            return : 8
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CF78 | system:True | depth:2 | sequence:145 |
            para0 : -1943906622
            para1 : timezone
            return : timezone
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CF80 | system:True | depth:2 | sequence:146 |
    +[NSLocale currentLocale] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192282290 | text:0x182ADA290 | invoke:0x10F26CF94 | system:True | depth:2 | sequence:147 |
            return : <__NSCFLocale: 0x600002908540> 'zh_CN'}
    -[__NSCFLocale objectForKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x192287714 | text:0x182ADF714 | invoke:0x10F26CFB4 | system:True | depth:2 | sequence:149 |
            para0 : kCFLocaleCountryCodeKey
            return : CN
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26CFD8 | system:True | depth:2 | sequence:151 |
            para0 : -1945799864
            para1 : region
            return : region
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26CFE0 | system:True | depth:2 | sequence:152 |
    +[NSTimeZone systemTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922955C4 | text:0x182AED5C4 | invoke:0x10F26CFFC | system:True | depth:2 | sequence:154 |
            return : Asia/Shanghai (GMT+8) offset 28800
    -[__NSTimeZone name] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E33F4 | text:0x182B3B3F4 | invoke:0x10F26D014 | system:True | depth:2 | sequence:156 |
            return : Asia/Shanghai
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D038 | system:True | depth:2 | sequence:158 |
            para0 : Asia/Shanghai
            para1 : tz_name
            return : tz_name
    +[NSTimeZone systemTimeZone] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922955C4 | text:0x182AED5C4 | invoke:0x10F26D05C | system:True | depth:2 | sequence:161 |
            return : Asia/Shanghai (GMT+8) offset 28800
    -[__NSTimeZone secondsFromGMT] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922E56A0 | text:0x182B3D6A0 | invoke:0x10F26D070 | system:True | depth:2 | sequence:163 |
            return : 28800
    +[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26D080 | system:True | depth:2 | sequence:164 |
            para0 : 28800
            return : 28800
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D0A4 | system:True | depth:2 | sequence:166 |
            para0 : -1944448318
            para1 : tz_offset
            return : tz_offset
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D0AC | system:True | depth:2 | sequence:167 |
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D0C0 | system:False | depth:2 | sequence:169 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager currentAppLauguage] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA11BAC | text:0x10F269BAC | invoke:0x10F26D0D8 | system:False | depth:2 | sequence:171 |
            return : zh
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D104 | system:True | depth:2 | sequence:174 |
            para0 : -1944686648
            para1 : app_language
            return : app_language
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D110 | system:False | depth:2 | sequence:175 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager currentAppRegion] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA11C10 | text:0x10F269C10 | invoke:0x10F26D128 | system:False | depth:2 | sequence:177 |
            return : CN
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D154 | system:True | depth:2 | sequence:180 |
            para0 : -1945799864
            para1 : app_region
            return : app_region
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D160 | system:False | depth:2 | sequence:181 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager clientDID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115428B78 | text:0x105C80B78 | invoke:0x10F26D178 | system:False | depth:2 | sequence:183 |
            return : 6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D19C | system:True | depth:2 | sequence:185 |
            para0 : 6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6
            para1 : cdid
            return : cdid
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D1B8 | system:False | depth:2 | sequence:188 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager installID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115428874 | text:0x105C80874 | invoke:0x10F26D1D4 | system:False | depth:2 | sequence:190 |
            return : 7321998383908030214
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D200 | system:False | depth:2 | sequence:194 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager installID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115428874 | text:0x105C80874 | invoke:0x10F26D214 | system:False | depth:2 | sequence:196 |
            return : 7321998383908030214
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D238 | system:True | depth:2 | sequence:198 |
            para0 : 7321998383908030214
            para1 : install_id
            return : install_id
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D270 | system:False | depth:2 | sequence:201 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager deviceID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115427038 | text:0x105C7F038 | invoke:0x10F26D28C | system:False | depth:2 | sequence:203 |
            return : 7321996726894102022
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D2B4 | system:False | depth:2 | sequence:207 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager deviceID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115427038 | text:0x105C7F038 | invoke:0x10F26D2C8 | system:False | depth:2 | sequence:209 |
            return : 7321996726894102022
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D2EC | system:True | depth:2 | sequence:211 |
            para0 : 7321996726894102022
            para1 : device_id
            return : device_id
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D324 | system:False | depth:2 | sequence:214 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager dToken] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11550791C | text:0x105D5F91C | invoke:0x10F26D33C | system:False | depth:2 | sequence:216 |
            return : 0
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D36C | system:True | depth:2 | sequence:218 |
            para0 : 
            para1 : device_token
            return : device_token
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D374 | system:True | depth:2 | sequence:219 |
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D390 | system:False | depth:2 | sequence:221 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager sceneStatus] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155078FC | text:0x105D5F8FC | invoke:0x10F26D3AC | system:False | depth:2 | sequence:223 |
            return : 0
    +[NSNumber numberWithInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19319E620 | text:0x1839F6620 | invoke:0x10F26D3BC | system:True | depth:2 | sequence:224 |
            para0 : 0
            return : 0
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D3E0 | system:True | depth:2 | sequence:226 |
            para0 : -1943907646
            para1 : scene
            return : scene
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D3E8 | system:True | depth:2 | sequence:227 |
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D3FC | system:False | depth:2 | sequence:229 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager sceneStatus] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155078FC | text:0x105D5F8FC | invoke:0x10F26D410 | system:False | depth:2 | sequence:231 |
            return : 0
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D450 | system:False | depth:2 | sequence:233 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager isDisableIDFV] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507904 | text:0x105D5F904 | invoke:0x10F26D468 | system:False | depth:2 | sequence:235 |
            return : 0
    +[UIDevice currentDevice] </System/iOSSupport/System/Library/PrivateFrameworks/UIKitCore.framework/Versions/A/UIKitCore> | call_cnt:1 | impl:0x1BC35E564 | text:0x1ACBB6564 | invoke:0x10F26D4AC | system:True | depth:2 | sequence:237 |
            return : <UIDevice: 0x6000095f8540>
    -[UIDevice respondsToSelector:] </usr/lib/libobjc.A.dylib> | call_cnt:1 | impl:0x191E7FB04 | text:0x1826D7B04 | invoke:0x10F26D4CC | system:True | depth:2 | sequence:239 |
            para0 : identifierForVendor
            return : 1
    +[BDIDFVPrivacyCertEntry getIDFVString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115873A38 | text:0x1060CBA38 | invoke:0x10F26D4F4 | system:False | depth:2 | sequence:241 |
            return : B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D518 | system:True | depth:2 | sequence:243 |
            para0 : B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC
            para1 : vendor_id
            return : vendor_id
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D52C | system:False | depth:2 | sequence:245 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager isDisableIDFA] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115507910 | text:0x105D5F910 | invoke:0x10F26D544 | system:False | depth:2 | sequence:247 |
            return : 0
    +[BDIDFAPrivacyCertEntry getIDFAString] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1158734EC | text:0x1060CB4EC | invoke:0x10F26D59C | system:False | depth:2 | sequence:249 |
            return : 00000000-0000-0000-0000-000000000000
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D5C4 | system:True | depth:2 | sequence:251 |
            para0 : 00000000-0000-0000-0000-000000000000
            para1 : idfa
            return : 1
    +[TTInstallUtil authorizationStatus] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA15D44 | text:0x10F26DD44 | invoke:0x10F26D5E0 | system:False | depth:2 | sequence:253 |
            return : 0
    +[NSNumber numberWithUnsignedInteger:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193180F10 | text:0x1839D8F10 | invoke:0x10F26D5F4 | system:True | depth:2 | sequence:254 |
            para0 : 0
            return : 0
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D618 | system:True | depth:2 | sequence:256 |
            para0 : -1943907646
            para1 : auth_status
            return : auth_status
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D620 | system:True | depth:2 | sequence:257 |
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D62C | system:False | depth:2 | sequence:258 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager customHeaderBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA12778 | text:0x10F26A778 | invoke:0x10F26D648 | system:False | depth:2 | sequence:260 |
            return : <__NSMallocBlock__: 0x60000ccad740>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d88b8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    +[TTInstallIDManager sharedInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115411460 | text:0x105C69460 | invoke:0x10F26D670 | system:False | depth:2 | sequence:264 |
            return : <TTInstallIDManager: 0x100ae6d60>
    -[TTInstallIDManager customHeaderBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA12778 | text:0x10F26A778 | invoke:0x10F26D684 | system:False | depth:2 | sequence:266 |
            return : <__NSMallocBlock__: 0x60000ccad740>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d88b8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    ___lldb_unnamed_symbol1059534 <DemoTTCore> | call_cnt:1 | impl:0x11C4D88B8 | text:0x10CD308B8 | invoke:0x10F26D698 | system:False | depth:2 | sequence:268 |
    -[__NSDictionaryM setValue:forKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1931BA624 | text:0x183A12624 | invoke:0x10F26D6CC | system:True | depth:2 | sequence:272 |
            para0 : {    "app_language" = zh;    "app_region" = CN;    "build_number" = 306019;    "filter_warn" = 0;    "is_kids_mode" = 0;    "is_pad" = 1;    "user_mode" = 0;    "user_period" = 0;    "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";}
            para1 : custom
            return : custom
    NSClassFromString <Foundation> | call_cnt:1 | impl:0x1931745EC | text:0x1839CC5EC | invoke:0x10F26D6E0 | system:True | depth:2 | sequence:274 |
    -[__NSDictionaryM copy] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922ACA08 | text:0x182B04A08 | invoke:0x10F26D79C | system:True | depth:2 | sequence:276 |
            return : {
                header =     {
                    access = WIFI;
                    aid = 1180;
                    "app_language" = zh;
                    "app_name" = trill;
                    "app_region" = CN;
                    "app_version" = "30.6.0";
                    "auth_status" = 0;
                    carrier = "";
                    "carrier_region" = "";
                    cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
                    channel = "App Store";
                    custom =         {
                        "app_language" = zh;
                        "app_region" = CN;
                        "build_number" = 306019;
                        "filter_warn" = 0;
                        "is_kids_mode" = 0;
                        "is_pad" = 1;
                        "user_mode" = 0;
                        "user_period" = 0;
                        "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
                    };
                    "device_id" = 7321996726894102022;
                    "device_model" = arm64;
                    "device_token" = "";
                    "display_name" = DemoTT;
                    idfa = "00000000-0000-0000-0000-000000000000";
                    "install_id" = 7321998383908030214;
                    "is_jailbroken" = 0;
                    "is_upgrade_user" = 0;
                    language = "zh-Hans-CN";
                    "mcc_mnc" = "";
                    "model_display_name" = arm64;
                    os = iOS;
                    "os_version" = "16.3";
                    package = "com.ss.iphone.ugc.Ame";
                    region = CN;
                    resolution = "2560*1440";
                    scene = 0;
                    "sdk_version" = 272;
                    timezone = 8;
                    "tz_name" = "Asia/Shanghai";
                    "tz_offset" = 28800;
                    "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
                    "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
                };
                "magic_tag" = "ss_app_log";
            }
    -[__NSPlaceholderDictionary initWithDictionary:copyItems:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922815FC | text:0x182AD95FC | invoke:0x10F26D7B8 | system:True | depth:2 | sequence:277 |
            para0 : {    header =     {        access = WIFI;        aid = 1180;        "app_language" = zh;        "app_name" = trill;        "app_region" = CN;        "app_version" = "30.6.0";        "auth_status" = 0;        carrier = "";        "carrier_region" = "";        cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";        channel = "App Store";        custom =         {            "app_language" = zh;            "app_region" = CN;            "build_number" = 306019;            "filter_warn" = 0;            "is_kids_mode" = 0;            "is_pad" = 1;            "user_mode" = 0;            "user_period" = 0;            "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";        };        "device_id" = 7321996726894102022;        "device_model" = arm64;        "device_token" = "";        "display_name" = DemoTT;        idfa = "00000000-0000-0000-0000-000000000000";        "install_id" = 7321998383908030214;        "is_jailbroken" = 0;        "is_upgrade_user" = 0;        language = "zh-Hans-CN";        "mcc_mnc" = "";        "model_display_name" = arm64;        os = iOS;        "os_version" = "16.3";        package = "com.ss.iphone.ugc.Ame";        region = CN;        resolution = "2560*1440";        scene = 0;        "sdk_version" = 272;        timezone = 8;        "tz_name" = "Asia/Shanghai";        "tz_offset" = 28800;        "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";        "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";    };    "magic_tag" = "ss_app_log";}
            para1 : 1
            return : {
                header =     {
                    access = WIFI;
                    aid = 1180;
                    "app_language" = zh;
                    "app_name" = trill;
                    "app_region" = CN;
                    "app_version" = "30.6.0";
                    "auth_status" = 0;
                    carrier = "";
                    "carrier_region" = "";
                    cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
                    channel = "App Store";
                    custom =         {
                        "app_language" = zh;
                        "app_region" = CN;
                        "build_number" = 306019;
                        "filter_warn" = 0;
                        "is_kids_mode" = 0;
                        "is_pad" = 1;
                        "user_mode" = 0;
                        "user_period" = 0;
                        "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
                    };
                    "device_id" = 7321996726894102022;
                    "device_model" = arm64;
                    "device_token" = "";
                    "display_name" = DemoTT;
                    idfa = "00000000-0000-0000-0000-000000000000";
                    "install_id" = 7321998383908030214;
                    "is_jailbroken" = 0;
                    "is_upgrade_user" = 0;
                    language = "zh-Hans-CN";
                    "mcc_mnc" = "";
                    "model_display_name" = arm64;
                    os = iOS;
                    "os_version" = "16.3";
                    package = "com.ss.iphone.ugc.Ame";
                    region = CN;
                    resolution = "2560*1440";
                    scene = 0;
                    "sdk_version" = 272;
                    timezone = 8;
                    "tz_name" = "Asia/Shanghai";
                    "tz_offset" = 28800;
                    "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
                    "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
                };
                "magic_tag" = "ss_app_log";
            }
    -[NSRecursiveLock unlock] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317CAFC | text:0x1839D4AFC | invoke:0x10F26D7D8 | system:True | depth:2 | sequence:279 |
            return : 0
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D7E0 | system:True | depth:2 | sequence:280 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F26D7E8 | system:True | depth:2 | sequence:281 |
}
+[NSDictionary dictionaryWithDictionary:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x1922C8884 | text:0x182B20884 | invoke:0x10F268624 | system:True | depth:1 | sequence:3 |
        para0 : {    header =     {        access = WIFI;        aid = 1180;        "app_language" = zh;        "app_name" = trill;        "app_region" = CN;        "app_version" = "30.6.0";        "auth_status" = 0;        carrier = "";        "carrier_region" = "";        cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";        channel = "App Store";        custom =         {            "app_language" = zh;            "app_region" = CN;            "build_number" = 306019;            "filter_warn" = 0;            "is_kids_mode" = 0;            "is_pad" = 1;            "user_mode" = 0;            "user_period" = 0;            "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";        };        "device_id" = 7321996726894102022;        "device_model" = arm64;        "device_token" = "";        "display_name" = DemoTT;        idfa = "00000000-0000-0000-0000-000000000000";        "install_id" = 7321998383908030214;        "is_jailbroken" = 0;        "is_upgrade_user" = 0;        language = "zh-Hans-CN";        "mcc_mnc" = "";        "model_display_name" = arm64;        os = iOS;        "os_version" = "16.3";        package = "com.ss.iphone.ugc.Ame";        region = CN;        resolution = "2560*1440";        scene = 0;        "sdk_version" = 272;        timezone = 8;        "tz_name" = "Asia/Shanghai";        "tz_offset" = 28800;        "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";        "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";    };    "magic_tag" = "ss_app_log";}
        return : {
            header =     {
                access = WIFI;
                aid = 1180;
                "app_language" = zh;
                "app_name" = trill;
                "app_region" = CN;
                "app_version" = "30.6.0";
                "auth_status" = 0;
                carrier = "";
                "carrier_region" = "";
                cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";
                channel = "App Store";
                custom =         {
                    "app_language" = zh;
                    "app_region" = CN;
                    "build_number" = 306019;
                    "filter_warn" = 0;
                    "is_kids_mode" = 0;
                    "is_pad" = 1;
                    "user_mode" = 0;
                    "user_period" = 0;
                    "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";
                };
                "device_id" = 7321996726894102022;
                "device_model" = arm64;
                "device_token" = "";
                "display_name" = DemoTT;
                idfa = "00000000-0000-0000-0000-000000000000";
                "install_id" = 7321998383908030214;
                "is_jailbroken" = 0;
                "is_upgrade_user" = 0;
                language = "zh-Hans-CN";
                "mcc_mnc" = "";
                "model_display_name" = arm64;
                os = iOS;
                "os_version" = "16.3";
                package = "com.ss.iphone.ugc.Ame";
                region = CN;
                resolution = "2560*1440";
                scene = 0;
                "sdk_version" = 272;
                timezone = 8;
                "tz_name" = "Asia/Shanghai";
                "tz_offset" = 28800;
                "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";
                "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";
            };
            "magic_tag" = "ss_app_log";
        }
-[TTInstallIDManager configParams] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA120FC | text:0x10F26A0FC | invoke:0x10F268658 | system:False | depth:1 | sequence:6 |
        return : {
            "activate_url_string" = "https://log.DemoTTv.com/service/2/app_alert_check/";
            "backup_device_id" = 7321996726894102022;
            "need_encrypt" = 1;
            "register_url_string" = "https://log.DemoTTv.com/service/2/device_register/";
        }
{
    -[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A11C | system:False | depth:2 | sequence:1 |
            return : <__NSMallocBlock__: 0x60000ccad800>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    -[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A13C | system:False | depth:2 | sequence:4 |
            return : <__NSMallocBlock__: 0x60000ccad800>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    ___lldb_unnamed_symbol1059500 <DemoTTCore> | call_cnt:1 | impl:0x11C4D75FC | text:0x10CD2F5FC | invoke:0x10F26A150 | system:False | depth:2 | sequence:6 |
}
-[__NSFrozenDictionaryM ttinstall_stringValueForKey:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0EEE8 | text:0x10F266EE8 | invoke:0x10F268678 | system:False | depth:1 | sequence:8 |
        para0 : register_url_string
        return : https://log.DemoTTv.com/service/2/device_register/
{
    -[__NSFrozenDictionaryM ttinstall_stringValueForKey:defaultValue:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0EEF8 | text:0x10F266EF8 | invoke:0x11244D244 | system:False | depth:2 | sequence:1 |
            para0 : register_url_string
            para1 : 0
}
___lldb_unnamed_symbol41536 <DemoTTCore> | call_cnt:1 | impl:0x11584D860 | text:0x1060A5860 | invoke:0x10F2686A0 | system:False | depth:1 | sequence:11 |
-[__NSCFConstantString containsString:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193195EB4 | text:0x1839EDEB4 | invoke:0x10F2686B8 | system:True | depth:1 | sequence:12 |
        para0 : ?
        return : 0
-[__NSCFConstantString stringByAppendingString:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317EAC8 | text:0x1839D6AC8 | invoke:0x10F2686D4 | system:True | depth:1 | sequence:13 |
        para0 : ?
        return : https://log.DemoTTv.com/service/2/device_register/?
-[TTInstallIDManager configParams] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA120FC | text:0x10F26A0FC | invoke:0x10F2686F8 | system:False | depth:1 | sequence:16 |
        return : {
            "activate_url_string" = "https://log.DemoTTv.com/service/2/app_alert_check/";
            "backup_device_id" = 7321996726894102022;
            "need_encrypt" = 1;
            "register_url_string" = "https://log.DemoTTv.com/service/2/device_register/";
        }
{
    -[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A11C | system:False | depth:2 | sequence:1 |
            return : <__NSMallocBlock__: 0x60000ccad800>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    -[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A13C | system:False | depth:2 | sequence:4 |
            return : <__NSMallocBlock__: 0x60000ccad800>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    ___lldb_unnamed_symbol1059500 <DemoTTCore> | call_cnt:1 | impl:0x11C4D75FC | text:0x10CD2F5FC | invoke:0x10F26A150 | system:False | depth:2 | sequence:6 |
}
-[__NSFrozenDictionaryM objectForKey:] </System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation> | call_cnt:1 | impl:0x19228577C | text:0x182ADD77C | invoke:0x10F268718 | system:True | depth:1 | sequence:18 |
        para0 : need_encrypt
        return : 1
-[TTInstallIDManager configParams] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA120FC | text:0x10F26A0FC | invoke:0x10F268740 | system:False | depth:1 | sequence:22 |
        return : {
            "activate_url_string" = "https://log.DemoTTv.com/service/2/app_alert_check/";
            "backup_device_id" = 7321996726894102022;
            "need_encrypt" = 1;
            "register_url_string" = "https://log.DemoTTv.com/service/2/device_register/";
        }
{
    -[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A11C | system:False | depth:2 | sequence:1 |
            return : <__NSMallocBlock__: 0x60000ccad800>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    -[TTInstallIDManager configParamsBlock] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA1276C | text:0x10F26A76C | invoke:0x10F26A13C | system:False | depth:2 | sequence:4 |
            return : <__NSMallocBlock__: 0x60000ccad800>
             signature: "@"NSDictionary"8@?0"
             invoke   : 0x11c4d75fc (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain)
             dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
    ___lldb_unnamed_symbol1059500 <DemoTTCore> | call_cnt:1 | impl:0x11C4D75FC | text:0x10CD2F5FC | invoke:0x10F26A150 | system:False | depth:2 | sequence:6 |
}
-[__NSFrozenDictionaryM ttinstall_boolValueForKey:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0F12C | text:0x10F26712C | invoke:0x10F268760 | system:False | depth:1 | sequence:24 |
        para0 : need_encrypt
        return : 1
{
    -[__NSFrozenDictionaryM ttinstall_boolValueForKey:defaultValue:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA0F13C | text:0x10F26713C | invoke:0x11244D244 | system:False | depth:2 | sequence:1 |
            para0 : need_encrypt
            para1 : 0
}
-[TTInstallIDManager deviceID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x115427038 | text:0x105C7F038 | invoke:0x10F268784 | system:False | depth:1 | sequence:26 |
        return : 7321996726894102022
{
    -[TTInstallIDManager fetchRealID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11542719C | text:0x105C7F19C | invoke:0x105C7F05C | system:False | depth:2 | sequence:1 |
            return : 0
     <> | call_cnt:1 | impl:0x11CFBBF80 | text:0x10D813F80 | invoke:0x105C7F06C | system:True | depth:2 | sequence:3 |
    pthread_mutex_lock <libsystem_pthread.dylib> | call_cnt:1 | impl:0x1002C0380 | text:0xF0B18380 | invoke:0x105C7F0AC | system:True | depth:2 | sequence:4 |
    pthread_mutex_unlock <libsystem_pthread.dylib> | call_cnt:1 | impl:0x1002C0124 | text:0xF0B18124 | invoke:0x105C7F104 | system:True | depth:2 | sequence:6 |
}
-[TTInstallIDManager isDeviceActivated] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11EA117A8 | text:0x10F2697A8 | invoke:0x10F2687B0 | system:False | depth:1 | sequence:28 |
        return : 0
{
    +[NSUserDefaults standardUserDefaults] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193179360 | text:0x1839D1360 | invoke:0x10F2697D8 | system:True | depth:2 | sequence:1 |
            return : <NSUserDefaults: 0x600000c0d0e0>
    -[NSUserDefaults stringForKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317C67C | text:0x1839D467C | invoke:0x10F2697FC | system:True | depth:2 | sequence:3 |
            para0 : kTTInstallServiceChannel
            return : App Store
    +[NSUserDefaults standardUserDefaults] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193179360 | text:0x1839D1360 | invoke:0x10F26981C | system:True | depth:2 | sequence:6 |
            return : <NSUserDefaults: 0x600000c0d0e0>
    -[NSUserDefaults stringForKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317C67C | text:0x1839D467C | invoke:0x10F269838 | system:True | depth:2 | sequence:8 |
            para0 : kTTInstallServiceAppVersion
            return : 30.6.0
    +[NSUserDefaults standardUserDefaults] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x193179360 | text:0x1839D1360 | invoke:0x10F269858 | system:True | depth:2 | sequence:11 |
            return : <NSUserDefaults: 0x600000c0d0e0>
    -[NSUserDefaults boolForKey:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317B494 | text:0x1839D3494 | invoke:0x10F269878 | system:True | depth:2 | sequence:13 |
            para0 : kTTInstallServiceIsActivated
            return : 0
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F269918 | system:True | depth:2 | sequence:15 |
     <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F269920 | system:True | depth:2 | sequence:16 |
}
-[TTInstallIDManager appID] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11550788C | text:0x105D5F88C | invoke:0x10F2687C4 | system:False | depth:1 | sequence:29 |
        return : 1180
{
    objc_getProperty <libobjc.A.dylib> | call_cnt:1 | impl:0x191E84488 | text:0x1826DC488 | invoke:0x11244D1FC | system:True | depth:2 | sequence:1 |
}
-[__NSCFString stringByAppendingFormat:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317DC24 | text:0x1839D5C24 | invoke:0x10F2687F4 | system:True | depth:1 | sequence:31 |
        para0 : device_id=%@&is_activated=%d&aid=%@
        return : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180
 <> | call_cnt:1 | impl:0x121BF526C | text:0x11244D26C | invoke:0x10F268810 | system:True | depth:1 | sequence:34 |
-[__NSCFString stringByAppendingString:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x19317EAC8 | text:0x1839D6AC8 | invoke:0x10F268830 | system:True | depth:1 | sequence:36 |
        para0 : &tt_data=a
        return : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
-[__NSCFString stringByAddingPercentEscapesUsingEncoding:] </System/Library/Frameworks/Foundation.framework/Versions/C/Foundation> | call_cnt:1 | impl:0x1932718E0 | text:0x183AC98E0 | invoke:0x10F26885C | system:True | depth:1 | sequence:39 |
        para0 : 4
        return : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
dispatch_async <libdispatch.dylib> | call_cnt:1 | impl:0x1006FC68C | text:0xF0F5468C | invoke:0x10F2688BC | system:True | depth:1 | sequence:43 |
        para0 : <__NSStackBlock__: 0x16ff9e7c0> signature: "v8@?0" invoke   : 0x11ea10a20 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain) copy     : 0x115612ee0 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`awemeMain) dispose  : 0x11560dfc8 (/Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore`<unknown dispose symbol>)
objc_initWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85864 | text:0x1826DD864 | invoke:0x10F2688C8 | system:True | depth:1 | sequence:44 |
+[TTNetworkManager shareInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11542A7C4 | text:0x105C827C4 | invoke:0x10F2688DC | system:False | depth:1 | sequence:45 |
        return : <TTNetworkManagerChromium: 0x1025b8990>
{
    +[TTNetworkManagerChromium shareInstance] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x11542A7D8 | text:0x105C827D8 | invoke:0x11244D244 | system:False | depth:2 | sequence:1 |
}
+[TTTInstallIDPostDataHttpRequestSerializer class] </usr/lib/libobjc.A.dylib> | call_cnt:1 | impl:0x191E7BE2C | text:0x1826D3E2C | invoke:0x10F268900 | system:True | depth:1 | sequence:47 |
        return : TTTInstallIDPostDataHttpRequestSerializer
+[TTHTTPJSONResponseSerializerBase class] </usr/lib/libobjc.A.dylib> | call_cnt:1 | impl:0x191E7BE2C | text:0x1826D3E2C | invoke:0x10F268914 | system:True | depth:1 | sequence:48 |
        return : TTHTTPJSONResponseSerializerBase
objc_copyWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85AB8 | text:0x1826DDAB8 | invoke:0x10F268948 | system:True | depth:1 | sequence:49 |
-[TTNetworkManagerChromium requestForJSONWithURL:params:method:needCommonParams:requestSerializer:responseSerializer:autoResume:callback:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155BC840 | text:0x105E14840 | invoke:0x10F268990 | system:False | depth:1 | sequence:51 |
        para0 : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
        para1 : {    header =     {        access = WIFI;        aid = 1180;        "app_language" = zh;        "app_name" = trill;        "app_region" = CN;        "app_version" = "30.6.0";        "auth_status" = 0;        carrier = "";        "carrier_region" = "";        cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";        channel = "App Store";        custom =         {            "app_language" = zh;            "app_region" = CN;            "build_number" = 306019;            "filter_warn" = 0;            "is_kids_mode" = 0;            "is_pad" = 1;            "user_mode" = 0;            "user_period" = 0;            "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";        };        "device_id" = 7321996726894102022;        "device_model" = arm64;        "device_token" = "";        "display_name" = DemoTT;        idfa = "00000000-0000-0000-0000-000000000000";        "install_id" = 7321998383908030214;        "is_jailbroken" = 0;        "is_upgrade_user" = 0;        language = "zh-Hans-CN";        "mcc_mnc" = "";        "model_display_name" = arm64;        os = iOS;        "os_version" = "16.3";        package = "com.ss.iphone.ugc.Ame";        region = CN;        resolution = "2560*1440";        scene = 0;        "sdk_version" = 272;        timezone = 8;        "tz_name" = "Asia/Shanghai";        "tz_offset" = 28800;        "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";        "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";    };    "magic_tag" = "ss_app_log";}
        para2 : POST
        para3 : 1
        para4 : TTTInstallIDPostDataHttpRequestSerializer
        para5 : TTHTTPJSONResponseSerializerBase
        return : <TTHttpTaskChromium: 0x127084840>
{
    -[TTNetworkManagerChromium callback_dispatch_queue] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155BC99C | text:0x105E1499C | invoke:0x105E148BC | system:False | depth:2 | sequence:5 |
            return : <OS_dispatch_queue_main: com.apple.main-thread[0x100768d40] = { xref = -2147483648, ref = -2147483648, sref = 1, target = com.apple.root.default-qos.overcommit[0x100769340], width = 0x1, state = 0x001ffe9e00000100, dirty, max qos 6, in-flight = 0, thread = 0x103 }>
    -[TTNetworkManagerChromium requestForJSONWithURL_:params:method:needCommonParams:headerField:requestSerializer:responseSerializer:autoResume:verifyRequest:isCustomizedCookie:callback:callbackWithResponse:dispatch_queue:] </Users/adminxxx/Desktop/DemoTT/DemoTT.app/Frameworks/DemoTTCore.framework/DemoTTCore> | call_cnt:1 | impl:0x1155BC9AC | text:0x105E149AC | invoke:0x105E14904 | system:False | depth:2 | sequence:7 |
            para0 : https://log.DemoTTv.com/service/2/device_register/?device_id=7321996726894102022&is_activated=0&aid=1180&tt_data=a
            para1 : {    header =     {        access = WIFI;        aid = 1180;        "app_language" = zh;        "app_name" = trill;        "app_region" = CN;        "app_version" = "30.6.0";        "auth_status" = 0;        carrier = "";        "carrier_region" = "";        cdid = "6E5A5C47-EF63-4EEB-AFD3-527A5811ABC6";        channel = "App Store";        custom =         {            "app_language" = zh;            "app_region" = CN;            "build_number" = 306019;            "filter_warn" = 0;            "is_kids_mode" = 0;            "is_pad" = 1;            "user_mode" = 0;            "user_period" = 0;            "web_ua" = "Mozilla/5.0 (iPad; CPU OS 13_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148";        };        "device_id" = 7321996726894102022;        "device_model" = arm64;        "device_token" = "";        "display_name" = DemoTT;        idfa = "00000000-0000-0000-0000-000000000000";        "install_id" = 7321998383908030214;        "is_jailbroken" = 0;        "is_upgrade_user" = 0;        language = "zh-Hans-CN";        "mcc_mnc" = "";        "model_display_name" = arm64;        os = iOS;        "os_version" = "16.3";        package = "com.ss.iphone.ugc.Ame";        region = CN;        resolution = "2560*1440";        scene = 0;        "sdk_version" = 272;        timezone = 8;        "tz_name" = "Asia/Shanghai";        "tz_offset" = 28800;        "user_agent" = "DemoTT 30.6.0 rv:306019 (iPad; iOS 16.3; zh_CN) Cronet";        "vendor_id" = "B1179DBB-35FE-5C96-80C4-D9CFF53E3ACC";    };    "magic_tag" = "ss_app_log";}
            para2 : POST
            para3 : 1
            para4 : 0
            para5 : TTTInstallIDPostDataHttpRequestSerializer
            return : <TTHttpTaskChromium: 0x127084840>
}
objc_destroyWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85B04 | text:0x1826DDB04 | invoke:0x10F2689B4 | system:True | depth:1 | sequence:56 |
objc_destroyWeak <libobjc.A.dylib> | call_cnt:1 | impl:0x191E85B04 | text:0x1826DDB04 | invoke:0x10F2689BC | system:True | depth:1 | sequence:57 |
}

1 个赞

好喜欢你的block 处理, 自己解析的block 结构么?

嗯,因为是基于汇编层面的处理,所以高级语言层面的信息都能解析得到。OC语法的很多特性在汇编层面都做好了解析处理。它和传统的那种“针对函数hook的trace”以及“专门针对汇编的trace”都不一样,它是在汇编环境去解析各种信息来还原高级语言的过程。在针对花指令、ollvm等各种奇技淫巧的混淆手段有奇效。

:100:

大佬工具有开源不 :grinning:

大佬:ox: