lefex/iWeChat

// 无参数
CHDeclareClass(WCActionSheet)
CHOptimizedMethod0(self, NSArray *, WCActionSheet, buttonTitleList){
    NSArray *titles = CHSuper0(WCActionSheet, buttonTitleList);
    return titles;
}

CHConstructor{
    CHLoadLateClass(WCActionSheet);
    CHClassHook0(WCActionSheet, buttonTitleList);
}

// 一个参数
CHDeclareClass(MMUIImageView);
CHOptimizedMethod1(self, void, MMUIImageView, setImage, NSString *, imageurl){
    NSLog(@"setImage: %@", imageurl);
    CHSuper1(MMUIImageView, setImage, imageurl);
}
CHConstructor{    
    CHLoadLateClass(MMUIImageView);
    CHClassHook1(MMUIImageView, setImage);
}

@interface Lefex : NSObject
@property (nonatomic, copy) NSString *city;
+ (Lefex *)empty;
- (void)updateNickName:(NSString *)nickName;
- (void)updateNickName:(NSString *)nickName age:(int)age;
- (void)requestNickNameForId:(NSString *)userId completion:(void(^)(NSString *))block;

@end

@synthesize city = _city;

@implementation Lefex

+ (Lefex *)empty {
    NSLog(@"orgin - %@", NSStringFromSelector(_cmd));
    return [Lefex new];
}

- (void)updateNickName:(NSString *)nickName {
    NSLog(@"orgin - %@", NSStringFromSelector(_cmd));
}

- (void)updateNickName:(NSString *)nickName age:(int)age {
    NSLog(@"orgin - %@", NSStringFromSelector(_cmd));
}

- (void)requestNickNameForId:(NSString *)userId completion:(void(^)(NSString *))block {
    NSLog(@"orgin - %@", NSStringFromSelector(_cmd));
    if (block) {
        block(@"lefe_x");
    }
}

- (void)setCity:(NSString *)city {
    _city = city;
}

- (NSString *)city {
    return _city;
}

@end

typedef void(^RequestBlock)(NSString *);

// hook某个类时需要先声明
CHDeclareClass(Lefex)

// Hook 类方法
CHOptimizedClassMethod0(self, Lefex *, Lefex, empty){
    Lefex *me = CHSuper0(Lefex, empty);
    NSLog(@"Hook empty");
    return me;
}

// Hook 一个参数的方法
CHOptimizedMethod1(self, void, Lefex, updateNickName, NSString *, name) {
    CHSuper1(Lefex, updateNickName, name);
    NSLog(@"hook updateNickName");
}

// Hook属性，hook对应的get和set方法
// hook set 方法
CHOptimizedMethod1(self, void, Lefex, setCity, NSString *, city) {
    CHSuper1(Lefex, setCity, @"BeiJing");
    NSLog(@"hook setCity");
}

// hook get 方法
CHOptimizedMethod0(self, void, Lefex, city) {
    NSLog(@"hook city");
    return CHSuper0(Lefex, city);
}

// Hook 两个参数的方法
CHOptimizedMethod2(self, void, Lefex, updateNickName, NSString *, name, age, int, age) {
    CHSuper2(Lefex, updateNickName, name, age, age);
    NSLog(@"hook updateNickName: age");
}

// Hook 带有block的方法，需要知道 block 中的参数个数
CHOptimizedMethod2(self, void, Lefex, requestNickNameForId, NSString *, userId, completion, RequestBlock, block) {
    RequestBlock nicknameBlock = ^(NSString *nickname) {
        NSLog(@"hook callback :%@", nickname);
        if (block) {
            block(nickname);
        }
    };
    
    CHSuper2(Lefex, requestNickNameForId, userId, completion, nicknameBlock);
    NSLog(@"hook requestNickNameForId: age");
}

// Hook 参数是二级指针的方法
CHOptimizedMethod1(self, void, Lefex, queryLocation, NSString **, name) {
    CHSuper1(Lefex, queryLocation, name);
    NSLog(@"hook queryLocation: %@", *name);
}

CHConstructor {
    // 导入类才能够使用
    // linkable
    CHLoadClass(Lefex);
    // un linkable
//    CHLoadLateClass(Lefex);

    CHClassHook1(Lefex, setCity);
    CHClassHook0(Lefex, city);
    CHClassHook0(Lefex, empty);
    CHClassHook1(Lefex, updateNickName);
    CHClassHook2(Lefex, updateNickName, age);
    CHClassHook2(Lefex, requestNickNameForId, completion);
    CHClassHook1(Lefex, queryLocation);
}

// 要 hook 的类
%hook ClassName

// hook 类方法
+ (id)sharedInstance
{
	%log;
	return %orig; // 调用原实现
}

- (void)messageWithNoReturnAndOneArgument:(id)originalArgument
{
	%log;
    // 调用原实现，可以修改参数
	%orig(originalArgument);
}

- (id)messageWithReturnAndNoArguments
{
	%log;

    // 调用原实现，查看返回值，修改返回值
	id originalReturnOfMessage = %orig;
	return originalReturnOfMessage;
}
// 要有结束标签
%end

@interface NetworkTask : NSObject

- (void)requestComplete:(void(^)(NSString *name))completion;
- (void)requestID:(NSString *)docId domplete:(void(^)(NSString *name))completion failed:(void(^)(NSError *error))failed;

@end

// 方法一：只支持一个参数
- (void)runTaskForPerform {
    NSObject *task = [objc_getClass("NetworkTask") new];
    void(^completeBlock)(NSString *) = ^(NSString *name) {
        NSLog(@"block: %@", name);
    };
    [task performSelector:@selector(requestComplete:) withObject:completeBlock];
}

// 方法二：支持多个参数
- (void)runTask {
    NSObject *task = [objc_getClass("NetworkTask") new];
    SEL selector = NSSelectorFromString(@"requestID:domplete:failed:");
    NSInvocation *invocation = [NSInvocation invocationWithMethodSignature:[objc_getClass("NetworkTask") instanceMethodSignatureForSelector:selector]];
    [invocation setSelector:selector];
    [invocation setTarget:task];
    NSString *docId = @"123";
    [invocation setArgument:&docId atIndex:2];

    void(^completeBlock)(NSString *) = ^(NSString *name) {
        NSLog(@"block invocation: %@", name);
    };
    [invocation setArgument:&completeBlock atIndex:3];

    void(^fliedBlock)(NSError *) = ^(NSError *error) {
        NSLog(@"block invocation error: %@", error);
    };
    [invocation setArgument:&fliedBlock atIndex:4];
    [invocation invoke];
}

// 方法三：支持多个参数
- (void)runTaskForMsgSend {
    NSString *docId = @"123";
    
    void(^completeBlock)(NSString *) = ^(NSString *name) {
        NSLog(@"block objc_msgSend: %@", name);
    };
    
    void(^filedBlock)(NSError *) = ^(NSError *error) {
        NSLog(@"block objc_msgSend error: %@", error);
    };
    NSObject *task = [objc_getClass("NetworkTask") new];
    SEL selector = NSSelectorFromString(@"requestID:domplete:failed:");

    ((void (*)(id, SEL, id, id, id, id))objc_msgSend)(task, selector, docId, completeBlock, filedBlock, NULL);
}

// 调用某个类方法
NSString *title = [NSClassFromString(@"TTool") invoke:@"getFormatString:" arguments:@[item.title ?: @""]];

// 调用类方法，并模拟进入某个页面
UIViewController *detailVC = [@"LEFEBookDetailsViewController" invokeClassMethod:@"alloc"];
[detailVC invoke:@"initWithBookId:type:" args:dataItem.bookId, @(dataItem.bookType), nil];
[detailVC invoke:@"view"];
[detailVC invoke:@"viewWillAppear:" args:@(0), nil];
[detailVC invoke:@"viewDidAppear:" args:@(0), nil];

NSString *filePath = [[NSBundle mainBundle] pathForResource:@"word" ofType:@"json"];
// 如果添加到 xxxDylib 中，资源文件将找不到

1.查看可执行文件 Macch-O的架构
➜  ~ file ~/Desktop/Mach-ODemo
/Users/wangsuyan/Desktop/Mach-ODemo: Mach-O universal binary with 2 architectures: [arm_v7:Mach-O executable arm_v7] [arm64:Mach-O 64-bit executable arm64]
/Users/wangsuyan/Desktop/Mach-ODemo (for architecture armv7):	Mach-O executable arm_v7
/Users/wangsuyan/Desktop/Mach-ODemo (for architecture arm64):	Mach-O 64-bit executable arm64

2.通过 --arch 指定所使用CPU的架构
class-dump -a ~/Desktop/Mach-ODemo --arch armv7

3.查看Mach-O中某个类中的头文件
class-dump -C ViewController ~/Desktop/Mach-ODemo

4.查找Mach-O中某个方法
class-dump -f name lefex ~/Desktop/Mach-ODemo

static NSString *kName = @"name lefex";
static const NSString *kNameConst = @"name lefex const";

NSString *name = [NSString stringWithFormat:@"%@ - %@", kName, kNameConst];
NSLog(@"name --- %@", name);

- (void)lefex {
    NSLog(@"Hello lefex");
}

__attribute__((constructor(101)))
void before101() {
    NSLog(@"before101");
}

/Users/lefex/Desktop/Mach-ODemo (architecture armv7):
Contents of (__TEXT,__cstring) section
0000b67d  Hello lefex
0000b689  before101
0000b693  before103
0000b69d  before102
0000b6a7  Hello destory
0000b6b5  %@
0000b6b8  Hello load
0000b6c3  name lefex
0000b6ce  name lefex const

CodeSign /Users/wangsuyan/Library/Developer/Xcode/DerivedData/TVideo-hamzrgdkjpjxzwaloktqyzqrckpm/Build/Products/Debug-iphoneos/libTVideoDylib.dylib
    cd /Users/wangsuyan/Desktop/baidu/reverse/TVideo
    export CODESIGN_ALLOCATE=/Users/wangsuyan/Desktop/Xcode9.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate
    export PATH="/Users/wangsuyan/Desktop/Xcode9.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/usr/bin:/Users/wangsuyan/Desktop/Xcode9.app/Contents/Developer/usr/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin"
    
Signing Identity:     "iPhone Developer: xx (xxx)"

    /usr/bin/codesign --force --sign CE05AADAA82C40AD173C44316B410B221A24C9AB --entitlements /Users/wangsuyan/Library/Developer/Xcode/DerivedData/TVideo-hamzrgdkjpjxzwaloktqyzqrckpm/Build/Intermediates.noindex/TVideo.build/Debug-iphoneos/TVideoDylib.build/libTVideoDylib.dylib.xcent --timestamp=none /Users/wangsuyan/Library/Developer/Xcode/DerivedData/TVideo-hamzrgdkjpjxzwaloktqyzqrckpm/Build/Products/Debug-iphoneos/libTVideoDylib.dylib

CE05AADAA82C40AD173C44316B410B221A24C9AB: no identity found
Command /usr/bin/codesign failed with exit code 1
// 这个错误是修改了电脑时间