add

StudyNotes/Reverse Engineering/iOS Application/README.md

@@ -0,0 +1,53 @@
+### Shelling
+
+```
+$ otool -l App | grep crypt
+$ Clutch -i
+$ Clutch -i 1
+$ DYLD_INSERT_LIBRARIES=dumpdecrypted.dylib /path
+$ class-dump  -H  Mach-O path  -o path
+```
+### Cycript
+
+```
+$ ps -A 
+$ ps -A | grep WeChat
+``` 
+```
+$ cycript -p 3340
+$ cycript -p WeChat
+```
+```
+$ @import mjcript
+$ MJFrontVc()
+$ MJInstanceMethodNames(#0x158b50400, /regex/)
+$ MJSubviews(#0x158b50400.view)
+```
+
+### Theos
+
+```
+$ nic.pl
+NIC 2.0 - New Instance Creator
+------------------------------
+  [1.] iphone/activator_event
+  [2.] iphone/application_modern
+  [3.] iphone/cydget
+  [4.] iphone/flipswitch_switch
+  [5.] iphone/framework
+  [6.] iphone/ios7_notification_center_widget
+  [7.] iphone/library
+  [8.] iphone/notification_center_widget
+  [9.] iphone/preference_bundle_modern
+  [10.] iphone/tool
+  [11.] iphone/tweak
+  [12.] iphone/xpc_service
+Choose a Template (required): 11
+Project Name (required): tweak
+Package Name [com.yourcompany.tweak]: com.coderzsq.tweak
+Author/Maintainer Name [朱双泉]:
+[iphone/tweak] MobileSubstrate Bundle filter [com.apple.springboard]: com.tencent.xin
+[iphone/tweak] List of applications to terminate upon installation (space-separated, '-' for none) [SpringBoard]:
+Instantiating iphone/tweak in tweak/...
+Done.
+```

StudyNotes/Reverse Engineering/iOS Application/WeChat.app/Emoticon.xml

@@ -0,0 +1,63 @@
+<?xml version="1.0" encoding="utf-8"?>
+<page type="KitNode" key="KIT_EMOTICON" title="表情专属" version="3" resetable="yes">
+
+    <section title="表情其他设置">
+        <item type="switch" key="KIT_EMOTICON_RECENTUSEEMOJI_IGNORE_FILE" title="最近小表情忽略文件缓存" defaultValue="NO"/>
+        <item type="switch" key="KIT_EMOTICON_ADD_CUSTOM_TO_FIRST" title="添加表情到最前面" defaultValue="YES"/>
+    </section>
+
+    <section title="跟拍配置">
+        <item type="value" key="EMOTICON_YTSDK_FOLLOW_IMAGE_ALPHA" title="跟随表情不透明度" subTitle="0表示完全透明，1表示完全不透明" defaultValue="0.4" maxValue="1" minValue="0.0" step="0.1"/>
+        <item type="switch" key="EMOTICON_YTSDK_FOLLOW_FIRST_LOOP_ORIGIN" title="第一遍不变" defaultValue="NO"/>
+    </section>
+
+    <section title="自拍表情配置">
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_STROKE_WIDTH" title="输出描边宽度" defaultValue="8" maxValue="10" minValue="1" step="1"/>
+        <item type="value" key="EMOTICON_YTSDK_CAPTION_STROKE_WIDTH" title="字幕描边宽度" defaultValue="7" minValue="0" maxValue="15" step="0.5"/>
+        <item type="value" key="EMOTICON_YTSDK_CAPTION_KERN" title="字幕间距" defaultValue="3.5" minValue="0" maxValue="10" step="0.5"/>
+        <item type="value" key="EMOTICON_YTSDK_EMOTICON_WIDGET_COUNT" title="贴的表情上限" defaultValue="8" minValue="0" maxValue="20" step="1"/>
+
+        <item type="switch" key="EMOTICON_YTSDK_FORCE_SHOWTIPS" title="强行展示 Tips" defaultValue="NO"/>
+        <item type="switch" key="EMOTICON_YTSDK_JUST_PREVIEW" title="结束页仅展示效果" defaultValue="NO"/>
+        <item type="switch" key="EMOTICON_YTSDK_TRANS_VOICE" title="语音识别" defaultValue="YES"/>
+
+        <item type="switch" key="EMOTICON_YTSDK_FORCE_USE_ANOTHER_TYPE" title="强制使用另一种格式" subTitle="打开后，如果当前配置是 GIF 就用 WXAM，否则就用 GIF" defaultValue="NO"/>
+        <item type="value" key="EMOTICON_YTSDK_FPS_NORMAL" title="合成表情正常帧率" defaultValue="20" minValue="1" maxValue="40" step="1"/>
+        <item type="value" key="EMOTICON_YTSDK_FPS_FAST" title="合成表情加速帧率" defaultValue="30" minValue="1" maxValue="60" step="1"/>
+        <item type="value" key="EMOTICON_YTSDK_OUTPUT_SIZE" title="最终生成的size" defaultValue="300" minValue="240" maxValue="450" step="10"/>
+        <item type="value" key="EMOTICON_YTSDK_WXAM_QP" title="WXAM 质量因子" subTitle="1~50 越小越好，默认 25" defaultValue="20" minValue="1" maxValue="50" step="1"/>
+    </section>
+
+    <section title="美颜配置">
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_BEAUTY" title="美颜" defaultValue="0.2" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_BASIC_FACE" title="美型" defaultValue="0.1" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_VFace" title="V脸" defaultValue="0" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_CHIN" title="下巴" defaultValue="0" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_THIN_FACE" title="瘦脸" defaultValue="0" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_SHORT_FACE" title="短脸" defaultValue="0" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_ENLARGE_EYE" title="大眼" defaultValue="0" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="value" key="EMOTICON_YTSDK_CONFIG_THIN_NOSE" title="瘦鼻" defaultValue="0" maxValue="1.0" minValue="0" step="0.05" />
+        <item type="switch" key="EMOTICON_YTSDK_CONFIG_FILTER" title="是否使用滤镜" defaultValue="YES"/>
+    </section>
+
+    <mode key="EMOTICON_YTSDK_CONFIG_CAPTURE_PRESET" title="Capture Preset" subTitle="6sp 的前置摄像头不支持 1080P" defaultValue="2">
+        <option title="480 x 640"/>
+        <option title="720p"/>
+    </mode>
+
+    <mode key="KIT_EMOTICON_GIT_PREVIEW_MODE" title="相册 GIF 预览" defaultValue="2">
+        <option title="放大到屏幕边缘"/>
+        <option title="二倍图"/>
+        <option title="一倍图"/>
+    </mode>
+
+    <mode key="KIT_FOLLOW_EMOTICON_CONTENT_MODE" title="跟拍表情缩放模式" defaultValue="2">
+        <option title="拉伸以充满"/>
+        <option title="按比例拉伸以合适"/>
+        <option title="按比例拉伸以充满"/>
+    </mode>
+
+    <section title="乱入-地址链接识别">
+        <item type="switch" key="KIT_EMOTICON_ADDRESS_PARSER" title="强行打开地址识别" defaultValue="NO"/>
+    </section>
+</page>

StudyNotes/Reverse Engineering/iOS Application/WeChat.app/FaceAuth.xml

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<page type="KitNode" key="FaceAuth_Desc" title="视频面核" version="3" resetable="yes">
+    <section title="第三方">
+        <item type="doopr" title="微众银行" key="WEIZHONG_BANK" defaultValue="YES" locked="NO"/>
+    </section>
+    <section title="通话界面">
+        <item type="value" key="FACEAUTH_PRIVACY_TIP_TIME" title="隐私提示时间" defaultValue="6.0" minValue="0.5" maxValue="30.0" step="0.5"/>
+        <item type="switch" key="FACEAUTH_CONTROL_BTN" title="控制按钮" defaultValue="on" subTitle=""/>
+    </section>
+
+</page>

StudyNotes/Reverse Engineering/iOS Application/WeChat.app/Favorites.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<page type="KitNode" key="Favorites_Desc" title="收藏" version="2" resetable="yes">
+    <section title="笔记">
+        <item type="switch" key="Fav_Note_Template" title="打开笔记模板" defaultValue ="off"/>
+    </section>
+
+</page>

StudyNotes/Reverse Engineering/iOS Application/WeChat.app/FilterEngine.bundle/FilterResource/faceoff/crazyfacegray.json

@@ -0,0 +1,87 @@
+{
+    "facePoints": [
+11,359,
+18,466,
+30,536,
+47,606,
+73,673,
+110,735,
+158,790,
+214,835,
+280,864,
+353,873,
+424,859,
+487,825,
+542,780,
+590,726,
+627,664,
+653,596,
+668,526,
+679,454,
+683,349,
+47,278,
+103,258,
+163,250,
+222,254,
+282,252,
+226,214,
+155,205,
+87,219,
+655,270,
+601,247,
+542,241,
+484,249,
+426,252,
+478,211,
+546,200,
+612,215,
+149,327,
+175,335,
+203,336,
+231,329,
+257,316,
+231,298,
+202,296,
+172,306,
+202,316,
+202,315,
+563,322,
+535,332,
+504,336,
+473,331,
+443,321,
+468,298,
+502,292,
+535,300,
+503,315,
+503,313,
+302,322,
+296,449,
+248,518,
+298,547,
+348,558,
+399,545,
+445,514,
+398,447,
+395,325,
+348,501,
+225,651,
+473,651,
+262,675,
+303,691,
+346,696,
+391,693,
+434,677,
+409,655,
+346,656,
+285,654,
+270,635,
+315,620,
+346,628,
+378,621,
+425,637,
+409,649,
+346,649,
+284,647
+    ]
+}

StudyNotes/Reverse Engineering/iOS Application/WeChat.app/FilterEngine.bundle/FilterResource/faceoff/crazyfacegray.wmc

@@ -0,0 +1,2 @@
+m��ljɻ=[��s���h)�,'��N6�����Hep���v8B~�WFC	�i-�_�_W|�^�����?b�`��bG��mi P���n�/����"\��<q���4ꡓC$��9�&�F}|{��|n��/d������*a,����TZ�{�Kf�`.zO�vlX����+�H*�a��9���A���VcWR8��gm����l�u�mo�F�i�ec47\WRKZ'�ؗ����
��Y�]�M��<;2'<��@B������r�������u4�\1��r�pN��b����]."� N!�U"�_�_h-�Zz��zɤ�[���C��v.�A(��v�@��l�<�+�{��n�&/TP�o���B�<r�ɲ�g�e�(
+��fï

StudyNotes/Reverse Engineering/iOS Application/WeChat.app/FilterEngine.bundle/FilterResource/faceoff/eyeLighten.json

@@ -0,0 +1,101 @@
+
+{
+  "faceExchangeImage": "eyemask.jpg",
+  "blendAlpha":1.0,
+  "featureType": 0,
+  "grayScale": 0,
+  "blendMode": 0,
+  "facePoints": [
+ 78.440926, 264.068207,
+ 84.774666, 297.685760,
+ 90.621193, 324.969543,
+ 95.980515, 347.868439,
+ 107.186356, 369.305725,
+ 119.366623, 388.306946,
+ 138.855057, 405.846527,
+ 155.907425, 421.924469,
+ 175.883072, 434.104736,
+ 199.269180, 438.489655,
+ 222.655304, 433.130341,
+ 245.554199, 420.950073,
+ 264.068207, 403.897675,
+ 279.171753, 384.896454,
+ 292.813629, 367.356873,
+ 302.557861, 345.432404,
+ 309.378815, 322.533508,
+ 315.225342, 296.224121,
+ 316.686981, 262.119354,
+ 99.878197, 223.142502,
+ 119.853836, 222.168091,
+ 140.316681, 224.116928,
+ 160.779541, 228.014618,
+ 181.242386, 229.476242,
+ 163.702805, 216.808777,
+ 141.778320, 212.911087,
+ 119.853836, 212.911087,
+ 297.685760, 222.655304,
+ 277.710114, 222.168091,
+ 257.734467, 226.065781,
+ 242.143723, 228.501831,
+ 219.244827, 230.450668,
+ 232.399506, 217.783188,
+ 254.323990, 211.449448,
+ 279.658966, 211.449448,
+ 120.828255, 253.349579,
+ 130.085266, 259.196106,
+ 142.752747, 261.144958,
+ 154.933014, 260.170532,
+ 168.087692, 255.785629,
+ 158.830688, 246.528625,
+ 143.727158, 241.656509,
+ 131.546890, 244.579788,
+ 145.676010, 252.375153,
+ 145.676010, 251.400726,
+ 279.171753, 250.913513,
+ 268.940308, 258.221680,
+ 255.785629, 261.632141,
+ 243.605362, 260.657745,
+ 230.450668, 256.272827,
+ 240.682098, 246.041412,
+ 254.323990, 242.143723,
+ 267.478699, 244.092575,
+ 254.323990, 251.400726,
+ 254.323990, 250.426315,
+ 185.140076, 256.272827,
+ 183.191223, 300.121796,
+ 170.036545, 324.969543,
+ 185.140076, 334.226562,
+ 200.243607, 336.175385,
+ 214.372711, 333.252136,
+ 229.476242, 323.507904,
+ 216.321564, 300.609009,
+ 215.347137, 256.760040,
+ 200.243607, 318.148590,
+ 156.394638, 359.561523,
+ 244.579788, 358.587097,
+ 167.600494, 371.741791,
+ 182.216812, 379.537140,
+ 199.756393, 383.434845,
+ 217.295975, 379.049927,
+ 232.399506, 370.767365,
+ 221.193665, 368.331299,
+ 200.730820, 370.767365,
+ 176.370285, 368.331299,
+ 173.447021, 356.638245,
+ 189.524963, 355.176605,
+ 200.730820, 357.125458,
+ 210.962234, 356.638245,
+ 227.040192, 356.638245,
+ 221.193665, 364.920837,
+ 200.243607, 365.895264,
+ 177.344696, 363.946411,
+ 200.243607, 256.272827,
+ 202.192444, 230.450668,
+ 200.243607, 346.406830,
+ 102.801460, 102.801460,
+ 199.269180, 137.880630,
+ 299.147369, 98.903778,
+ 200.243607, 178.319122
+  ]
+}
+