@NickIN wrote:

Hi,

First of all thank you for writing such an good book. Motivated my to RE iOS applications.

Target is an game Boom Beach for learning purpose only.

Also i don't have an Mac but using windows & jailbreak iphone.
Using putty for windows log into the root with the password.

I want to dump the __text section & all the other section please guide me how to do it.

Will let you know what have been understood so far.

1. It exports _mhexecute_header Address at 0x100000000

2. Found at offset 0x4F4000 i.e. 0x100000000 we find mach_header_64
   mach_header_64 struc ; (sizeof=0x20, align=0x4, standard type)
   00000000 magic DCD ? 0xFEEDFACF <--- Magic Number
   00000004 cputype DCD ? 0x0100000C <--- CpuType
   00000008 cpusubtype DCD ? 0x00000000 <--- CpySubType = arm
   0000000C filetype DCD ? 0x00000002 <---Execute
   00000010 ncmds DCD ? 0x00000033 <--- No. of Load Commands
   00000014 sizeofcmds DCD ? 0x00001768 <--- Size of Load Commands
   00000018 flags DCD ? 0x00210085 <--- Sometype of constants
   0000001C reserved DCD ? 0x00000000 <--- Reserved Flags
   00000020 mach_header_64 ends

If we see Program Segmentation in IDA we find below details.

HEADER            0000000100000000 000000010000591C ? ? ? . L byte  21 public DATA 64 00 21
__text            000000010000591C 00000001003BF184 ? ? ? . L dword 01 public CODE 64 00 01
__stubs           00000001003BF184 00000001003C0F78 ? ? ? . L word  02 public CODE 64 00 02
__stub_helper     00000001003C0F78 00000001003C2D84 ? ? ? . L dword 03 public CODE 64 00 03
__gcc_except_tab  00000001003C2D84 000000010041CB10 ? ? ? . L dword 04 public      64 00 04
__cstring         000000010041CB10 000000010045167A ? ? ? . L para  05 public DATA 64 00 05
__TEXT_hidden     000000010045167A 0000000100451680 ? ? ? . L byte  22 public DATA 64 00 22
__const           0000000100451680 0000000100488B50 ? ? ? . L para  06 public DATA 64 00 06
__objc_methname   0000000100488B50 00000001004AB85A ? ? ? . L byte  07 public DATA 64 00 07
__objc_classname  00000001004AB85A 00000001004AD6F5 ? ? ? . L byte  08 public DATA 64 00 08
__objc_methtype   00000001004AD6F5 00000001004B3C05 ? ? ? . L byte  09 public DATA 64 00 09
__ustring         00000001004B3C06 00000001004B4212 ? ? ? . L word  0A public      64 00 0A
__TEXT_hidden     00000001004B4212 00000001004B4214 ? ? ? . L byte  23 public DATA 64 00 23
__unwind_info     00000001004B4214 00000001004C3CF8 ? ? ? . L dword 0B public      64 00 0B
__eh_frame        00000001004C3CF8 00000001004C4000 ? ? ? . L qword 0C public      64 00 0C
__got             00000001004C4000 00000001004C43E0 ? ? ? . L qword 0D public DATA 64 00 0D
__la_symbol_ptr   00000001004C43E0 00000001004C57D8 ? ? ? . L qword 0E public DATA 64 00 0E
__mod_init_func   00000001004C57D8 00000001004C5BE8 ? ? ? . L qword 0F public DATA 64 00 0F
__const           00000001004C5BF0 00000001004E8E80 ? ? ? . L para  10 public DATA 64 00 10
__cfstring        00000001004E8E80 00000001004FCC40 ? ? ? . L qword 11 public DATA 64 00 11
__objc_classlist  00000001004FCC40 00000001004FD560 ? ? ? . L qword 12 public DATA 64 00 12
__objc_nlclslist  00000001004FD560 00000001004FD568 ? ? ? . L qword 13 public DATA 64 00 13
__objc_catlist    00000001004FD568 00000001004FD5D8 ? ? ? . L qword 14 public DATA 64 00 14
__objc_protolist  00000001004FD5D8 00000001004FD838 ? ? ? . L qword 15 public DATA 64 00 15
__objc_imageinfo  00000001004FD838 00000001004FD840 ? ? ? . L dword 16 public      64 00 16
__objc_const      00000001004FD840 0000000100547A58 ? ? ? . L qword 17 public      64 00 17
__objc_selrefs    0000000100547A58 00000001005504A0 ? ? ? . L qword 18 public DATA 64 00 18
__objc_protorefs  00000001005504A0 00000001005504C8 ? ? ? . L qword 19 public DATA 64 00 19
__objc_classrefs  00000001005504C8 0000000100551110 ? ? ? . L qword 1A public DATA 64 00 1A
__objc_superrefs  0000000100551110 0000000100551720 ? ? ? . L qword 1B public DATA 64 00 1B
__objc_ivar       0000000100551720 0000000100552B08 ? ? ? . L dword 1C public      64 00 1C
__objc_data       0000000100552B08 0000000100558648 ? ? ? . L qword 1D public      64 00 1D
__data            0000000100558650 000000010055C191 ? ? ? . L para  1E public DATA 64 00 1E
__bss             000000010055C1A0 0000000100560034 ? ? ? . L para  1F public BSS  64 00 1F
__common          0000000100560038 0000000100560C40 ? ? ? . L qword 20 public BSS  64 00 20
__LINKEDIT_hidden 0000000100564000 000000010058F6A0 ? ? ? . L byte  24 public DATA 64 00 24
UNDEF             000000010058F6A0 0000000100591370 ? ? ? . L para  25 public XTRN 64 00 25

How will i know in gdb which portion of memory we need to dump ? I fail to understand.

Suppose if i need to dump __text

__text 000000010000591C 00000001003BF184

which starts at 0x10000591C & ends at 0x1003BF184 size: 0x3B9868

Now in IDA

000100000068 ; LC_SEGMENT_64 - 64-bit segment of this file to be mapped
HEADER:0000000100000068 segment_command_64 <0x19, 0x408, "_TEXT", 0x100000000, 0x4C4000, 0, \ ; LCSEGMENT_64 - 64-bit segment of this file to be mapped
HEADER:0000000100000068 0x4C4000, 5, 5, 0xC, 0>
HEADER:00000001000000B0 ; Sections
HEADER:00000001000000B0 DCB "__text",0,0,0,0,0,0,0,0,0,0; sectname
HEADER:00000001000000B0 DCB "__TEXT",0,0,0,0,0,0,0,0,0,0; segname
HEADER:00000001000000B0 DCQ 0x10000591C ; addr <------ Start Address
HEADER:00000001000000B0 DCQ 0x3B9868 ; size <------ Size
HEADER:00000001000000B0 DCD 0x591C ; offset
HEADER:00000001000000B0 DCD 2 ; align
HEADER:00000001000000B0 DCD 0 ; reloff
HEADER:00000001000000B0 DCD 0 ; nreloc
HEADER:00000001000000B0 DCD 0x80000400 ; flags
HEADER:00000001000000B0 DCD 0 ; reserved1
HEADER:00000001000000B0 DCD 0 ; reserved2
HEADER:00000001000000B0 DCD 0 ; reserved3

How should i dump using gdb in such scenario ? Experts please help in understanding it.

Since i dont have an MAC to get process id of the app used an app called DeviceStats which gives the Process ID of the app. I attach in gdb using attach

Below is some snippets from it while it attaches to the PID

/usr/bin/gdb: line 55: awk: command not found
warning: unrecognized host cpusubtype , defaulting to host==armv7.
GNU gdb 6.3.50-20050815 (Apple version gdb-1708 + reverse.put.as patches v0.4) (Mon Apr 16 00:53:47 UTC 2012)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "arm-apple-darwin".
(gdb) attach 2086
Attaching to process 2086.
Reading symbols for shared libraries . done
unable to read unknown load command 0x80000028
unable to read unknown load command 0x80000028
bfd_mach_o_scan: unknown architecture 0x100000c/0x0
bfd_mach_o_scan: unknown architecture 0x100000c/0x0
bfd_mach_o_scan: unknown architecture 0x100000c/0x0
Reading symbols for shared libraries ..............................................................................................................................................................................................................................................warning: Could not find object file "/Volumes/Data/BuildkiteWorkspace/IBA-BuildBox.local-1/itty-bitty-apps/reveal/build/Release-iphoneos/libReveal-iOS.a(IBAFunctions.o)" - no debug information available for "IBAFunctions.m".

Lots of warning message

then finally

................ done
unable to read unknown load command 0x80000028
unable to read unknown load command 0x80000028
bfd_mach_o_scan: unknown architecture 0x100000c/0x0
bfd_mach_o_scan: unknown architecture 0x100000c/0x0
bfd_mach_o_scan: unknown architecture 0x100000c/0x0
Reading symbols for shared libraries + done
0x3ba19544 in __semwait_signal ()
(gdb) **dump binary memory result1.bin 0x10000591c 0x1003bf184**

I tried dumping using above command & crash.
How should i dump properly ? please guide.

Thanks & Regards,
Nick

Posts: 3

Participants: 2

Read full topic

@blablabla wrote:

Hello, I was trying to use MobileHooker according the example in the book:

MSImageRef image = MSGetImageByName("/Applications/iOSRETargetApp.app/iOSRETargetApp");
NSLog(@"iOSRE Image addr: %@", image);
...
void *__ZN8CPPClass11CPPFunctionEPKc = MSFindSymbol(image, "__ZN8CPPClass11CPPFunctionEPKc");

My problem is that the call from MSGetImageByName always returns NULL. The permissions should be correct and I can see the symbols in IDA or with nm.

root# ls -l /Applications/iOSRETargetApp.app/iOSRETargetApp
-rwxr-xr-x 1 mobile staff 134368 Dec 20 10:33 /Applications/iOSRETargetApp.app/iOSRETargetApp

$ nm iOSRETargetApp  | grep __ZN8CPPClass11CPPFunctionEPKc
0000a678 T __ZN8CPPClass11CPPFunctionEPKc
000000010000652c T __ZN8CPPClass11CPPFunctionEPKc

After I kill the SpringBoard, it writes to syslog:

SpringBoard[3280]: iOSRE Image addr: (null)

Anyone with the same problem or possible solution? I use iOS 8.2.

Posts: 3

Participants: 2

Read full topic

@NickIN wrote:

Hi,

How do we know at which memory location __text section of __TEXT segment is loaded in Memory for an app which is running. Is there any tool to know that if yes please let me know.

Thanks Nick

Posts: 11

Participants: 4

Read full topic

@mattu wrote:

Hello guys I am here for serious help as I am a complete noob my problem start a month ago when my whatsapp stop working asking me to re-register only to promote me to download the latest whatapp version which is incompatible with my ios (I have iphone 4) and I can't get the appropriate ios . I started seeking help but no one was able to help so I start to analyze the problem in my hand after awhile I find out that manipulating whatsapp plist file enable me to open the app and read the message offline and now I want to check what happen if I re enter my owncountrycode and ownphonenumber correctly I check that it base 64 but somehow encrypted so it became obvious that reverse engineering skills is in demand but I am not one so I start looking in the net your book look the best place to start but I realize that diving into this new field would take me years so I would really appreciate help and direction.
What I was thinking is someone with reverse engineering skills could have better understanding of how country code and phone number is encrypted and save to plist file as base64 and mimic the process with python script .
Like this ("7">>> "UGsK1DrKOrZw4w09V/cQeA==")
THANK YOU VERY MUCH AND I AM APPRECIATING YOUR HELP.

Posts: 6

Participants: 2

Read full topic

@Asfer wrote:

Hi! I'm interested in an automation of the process of downloading and deleting Appstore apps on iOS 9. Namely, I would like to write a tweak which takes a link to an iTunes page with a free app as an input, downloads it, installs, does some stuff and then deletes the app.
At the moment, the only way I see of doing this is to open iTunes page with [NSApplication openURL:] and press some buttons via injecting into StoreKitUI, possibly closing some UIAlertViews along the way. I'm not sure yet, but it seems like an uninstall can be performed in the same fashion.
So, although I have some method here, it feels quite unreliable. Can anyone suggest a better approach? Any other thoughts on the topic would also be greatly appreciated. Thanks in advance!

Posts: 3

Participants: 2

Read full topic

@NickIN wrote:

Hi,

Can you suggest some good books for ARM Assembly Language.

We decompiled the program, loaded & dissembled in IDA but what the instruction is doing need to understand before patching it.

Thanks, NickIN

Posts: 3

Participants: 2

Read full topic

@snakeninny wrote:

According to saurik, add a .toString() to the end of the string you wanna print, like:
cy# [[UIApp keyWindow] recursiveDescription].toString()
And it works like a charm

Posts: 1

Participants: 1

Read full topic

@NickIN wrote:

Hi,

There is NO find command in gdb for iOS. What is the other alternative for memory bytes pattern finding for an running app on iOS ? Currently i am stopping the app, dumping particular region manually finding the bytes manually & patching the program & detach it to make it run but doing so it takes 3 min & the connection is lost with the server & app restarts.

LLDB might have this feature of searching but since i don't have any MAC what alternative you could suggest if any please enlighten.

Thanks, NickIN

Posts: 3

Participants: 2

Read full topic

@snakeninny wrote:

export THEOS=/opt/theos
Remember to change the dir path if you're not following the book.

rm -rf $THEOS
Delete the whole original Theos document. Make sure you back up things you've added like headers!

sudo git clone --recursive https://github.com/theos/theos.git $THEOS
Download the latest.

Posts: 1

Participants: 1

Read full topic

@oxcp wrote:

We can using theos to hook objective_c's functions, but recently, i tried to reverse a swift app, i cann't hook the swift functions;Does anybody know how to hook a swift function by theos; Any reply would be appreciated.

Posts: 2

Participants: 2

Read full topic

@NickIN wrote:

Hi,

Was surfing & searching for some thing on iOS landed on radare debugger page. Thought let me share it with community.

Radare seems to be an good alternative to gdb to debug iOS application.

http://www.radare.org

Thanks, NickIN

PS: Its steep learning curve for radare for sure but would be worth the efforts.

Posts: 2

Participants: 2

Read full topic

@Elgato wrote:

Salute to everyone!

First of all, great community!

I have a few ideas I want to bring to life but due to my lack of iOS coding knowledge, I need someone to help me. I will be able to donate to the developer for their work.

Looking forward to this! Thank you!

Posts: 32

Participants: 3

Read full topic

@maverik wrote:

Hi,
I need help to grap text from ballon, i think i see the right class CKBallonTextView but i don't know how can continue... Please help me!

Posts: 16

Participants: 2

Read full topic

@wbdn wrote:

Hello, I trying to install example compiled deb to iPad 4(9.0.2), it fails with
dpkg: error processing /com.iosre.iosgreetings_iphones-arm.deb(--install):
parse error, in file /var/lib/dpkg near line 3 package com.iosre.iosgreetings:
depends field, syntax error after reference to package firmware

If i trying install from, mac I got ==> Installing…
ssh: connect to host 192.168.0.101 port 22: Connection refused
make: *** [internal-install] Error 255

Posts: 12

Participants: 2

Read full topic

@snakeninny wrote:

Hi,
I suppose the following texts from syslog is enough for debugging:

Mar 15 10:01:35 FunMaker-5 networkd[189]: _57-[NETQualityManager refreshNetworkPredictionsForNetwork:]block_invoke skipping change event because updatePredictionsForNOI returned error Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"
Mar 15 10:01:42 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:02:12: --- last message repeated 2 times ---
Mar 15 10:02:12 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:02:22: --- last message repeated 1 time ---
Mar 15 10:02:22 FunMaker-5 syslogd[73]: ASL Sender Statistics
Mar 15 10:02:32 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:03:02: --- last message repeated 2 times ---
Mar 15 10:03:02 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:03:32: --- last message repeated 2 times ---
Mar 15 10:03:32 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:04:03: --- last message repeated 2 times ---
Mar 15 10:04:03 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:04:33: --- last message repeated 2 times ---
Mar 15 10:04:33 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:05:03: --- last message repeated 2 times ---
Mar 15 10:05:03 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:05:14: --- last message repeated 1 time ---
Mar 15 10:05:14 FunMaker-5 ABLE[362]: Current charge is 100.000000
Mar 15 10:05:23: --- last message repeated 1 time ---
Mar 15 10:05:23 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:05:53: --- last message repeated 2 times ---
Mar 15 10:05:53 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:06:03: --- last message repeated 1 time ---
Mar 15 10:06:03 FunMaker-5 imagent[51]: [Warning] No incoming push handler for selector: handler:isConnectedChanged: topic: (null) command: (null) context: (null)
Mar 15 10:06:13: --- last message repeated 1 time ---
Mar 15 10:06:13 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:06:43: --- last message repeated 2 times ---
Mar 15 10:06:43 FunMaker-5 backboardd[728]: BSXPCMessage received error for message: Connection interrupted
Mar 15 10:15:33 localhost bootlog[0]: BOOT_TIME 1458008133 0
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.CoreDuetAdmissionControl" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.HealthKit" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.HomeKit" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.MobileCal" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.PassKit" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.SoftwareUpdateBridge.companion" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.and.asl" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.aosnotifyd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.authkit.asl" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48: --- last message repeated 1 time ---
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.cloudd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.clouddocs" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.contacts.ContactsAutocomplete" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.corespotlight" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.family.asl" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.iad.logging" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48: --- last message repeated 1 time ---
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.icloud.FindMyDevice" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48: --- last message repeated 1 time ---
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.icloud.fmfd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48: --- last message repeated 2 times ---
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.iclouddriveapp" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.ind.asl" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.mobileme.fmf1" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.mobileme.fmip1" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.persistentphotos" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.photobackend" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.photoprivate" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.photos" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.securityd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48: --- last message repeated 7 times ---
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.serverdocs" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.softwareupdateservices" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.tips" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.tipsd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.wcd" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost syslogd[30]: Configuration Notice:
ASL Module "com.apple.welcomemat" claims selected messages.
Those messages may not appear in standard system log files or in the ASL database.
Mar 15 10:15:48 localhost kernel[0]: failed (pid: 22 sel: 1 ret: '-536870195')
Mar 15 10:15:48 localhost kernel[0]: AppleKeyStore: operation failed (pid: 22 sel: 1 ret: '-536870195')
Mar 15 10:15:48: --- last message repeated 11 times ---
Mar 15 10:15:48 localhost kernel[0]:
Mar 15 10:15:48 localhost kernel[0]: AppleMultitouchN1SPI: downloaded 128 bytes of prox calibration data ("built-in")
Mar 15 10:15:48 localhost kernel[0]: AppleMultitouchN1SPI: downloaded 1024 bytes of calibration data ("built-in")
Mar 15 10:15:48 localhost kernel[0]: AppleMultitouchN1SPI: downloaded firmware ("0x0266.bin") in 153ms.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: ThrottleInterval set to zero. You're not that important. Ignoring.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: ThrottleInterval set to zero. You're not that important. Ignoring.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: This service is defined to be constantly running and is inherently inefficient.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: ThrottleInterval set to zero. You're not that important. Ignoring.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: ThrottleInterval set to zero. You're not that important. Ignoring.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: Could not import service from caller: path = /Library/LaunchDaemons/com.apple.CommCenterClassic.plist, caller = launchctl.28, error = 138: Service cannot be loaded on this hardware
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: Could not import service from caller: path = /Library/LaunchDaemons/com.apple.CommCenterLite.plist, caller = launchctl.28, error = 138: Service cannot be loaded on this hardware
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: ThrottleInterval set to zero. You're not that important. Ignoring.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: ThrottleInterval set to zero. You're not that important. Ignoring.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: ThrottleInterval set to zero. You're not that important. Ignoring.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: Unknown key for string: seatbelt-profiles
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: The ServiceIPC key is no longer respected. Please remove it.
Mar 15 10:15:46 localhost com.apple.xpc.launchd1: This service is defined to be constantly running and is inherently inefficient.
Mar 15 10:15:48 localhost syslogd[30]: ASL Sender Statistics
Mar 15 10:15:48 localhost keybagd[39]: MS:Notice: Injecting: (null) keybagd
Mar 15 10:15:48 localhost configd[45]: MS:Notice: Injecting: (null) configd
Mar 15 10:15:48 localhost fairplayd.H2[63]: MS:Notice: Injecting: (null) fairplayd.H2
Mar 15 10:15:48 localhost mtmergeprops[61]: MS:Notice: Injecting: (null) mtmergeprops
Mar 15 10:15:48 localhost UserEventAgent[127]: MS:Notice: Injecting: (null) UserEventAgent
Mar 15 10:15:48 localhost fseventsd[97]: event logs in /private/var/.fseventsd out of sync with volume. destroying old logs. (260140 9 260148)
Mar 15 10:15:48 localhost mDNSResponder[51]: MS:Notice: Injecting: (null) mDNSResponder
Mar 15 10:15:48 localhost iaptransportd[43]: MS:Notice: Injecting: com.apple.iaptransportd iaptransportd
Mar 15 10:15:48 localhost lockdownd[49]: MS:Notice: Injecting: (null) lockdownd
Mar 15 10:15:48 localhost assertiond[113]: MS:Notice: Injecting: (null) assertiond
Mar 15 10:15:48 localhost distnoted[169]: # distnote server daemon absolute time: 0.608691725 civil time: Tue Mar 15 10:15:48 2016 pid: 169 uid: 241 root: yes
Mar 15 10:15:48 localhost wifid[137]: MS:Notice: Injecting: (null) wifid
Mar 15 10:15:48 localhost configd[45]: Starting "configd" plugin thread
Mar 15 10:15:48 localhost backboardd[111]: MS:Notice: Injecting: com.apple.backboardd backboardd
Mar 15 10:15:49 localhost kernel[0]: 000026.101282 wlan0.N[5] bootChipImageAT2875: state 0x20
Mar 15 10:15:48 localhost imagent[53]: MS:Notice: Injecting: com.apple.imagent imagent
Mar 15 10:15:48 localhost atc[55]: MS:Notice: Injecting: com.apple.atc atc
Mar 15 10:15:48 localhost timed[67]: MS:Notice: Injecting: com.apple.timed timed
Mar 15 10:15:48 localhost BTServer[135]: MS:Notice: Injecting: com.apple.BTServer BTServer
Mar 15 10:15:48 localhost mtmergeprops[61]: Successfully merged properties. Exiting.
Mar 15 10:15:48 localhost wifiFirmwareLoader[107]: WiFi Firmware Loader logging enabled, re-directing wifiFirmwareLoader logs..
Mar 15 10:15:48 localhost mediaserverd[73]: MS:Notice: Injecting: com.apple.mediaserverd mediaserverd
Mar 15 10:15:48 localhost lsd[173]: MS:Notice: Injecting: (null) lsd
Mar 15 10:15:48 localhost CommCenter[35]: MS:Notice: Injecting: com.apple.coretelephony CommCenter
Mar 15 10:15:48 localhost UserEventAgent[127]: Unable to look up battery voltage
Mar 15 10:15:48 localhost identityservicesd[77]: MS:Notice: Injecting: com.apple.identityservicesd identityservicesd
Mar 15 10:15:48 localhost ptpd[37]: MS:Notice: Injecting: (null) ptpd
Mar 15 10:15:48 localhost configd[45]: thread id=0x40115000
Mar 15 10:15:48 localhost configd[45]: searching for bundles in "/System/Library/SystemConfiguration"
Mar 15 10:15:48 localhost UserEventAgent[127]: writing previous session log
Mar 15 10:15:48 localhost fseventsd[97]: log dir: /private/var/.fseventsd getting new uuid: 050DA6E6-EF9A-417F-8E44-FDBBB8D99A74
Mar 15 10:15:48 localhost mDNSResponder[51]: mDNSResponder mDNSResponder-624.1.1 (Jul 30 2015 20:21:39) starting iOSVers 13
Mar 15 10:15:48 localhost wifiFirmwareLoader[107]: Going to discover services
Mar 15 10:15:48 localhost UserEventAgent[127]: jetsam: Setting jetsam_diagnostic_mode using sysctl failed with 2: No such file or directory
Mar 15 10:15:48 localhost UserEventAgent[127]:
Mar 15 10:15:48 localhost wifiFirmwareLoader[107]: full path firmwareName is /usr/share/firmware/wifi/4334b1/centennial.trx
Mar 15 10:15:48 localhost wifiFirmwareLoader[107]: Waiting for firmware to load
Mar 15 10:15:49 localhost wifiFirmwareLoader[107]: full path NVRAM is /usr/share/firmware/wifi/4334b1/heineken-m-ms.txt
Mar 15 10:15:49 localhost wifiFirmwareLoader[107]: WiFiUserClientPrepareMapping return 0 firmwarebuffer len 454656 nvrambuffer len 1789 reg len 0
Mar 15 10:15:49 localhost configd[45]: loading bundles
Mar 15 10:15:49 localhost configd[45]: adding com.apple.SystemConfiguration.InterfaceNamer
Mar 15 10:15:49 localhost configd[45]: loading com.apple.configd.usbdeviceconfig
Mar 15 10:15:49 localhost fseventsd[97]: event logs in /.fseventsd out of sync with volume. destroying old logs. (1742 11 260149)
Mar 15 10:15:49 localhost fseventsd[97]: log dir: /.fseventsd getting new uuid: D8A352A1-5292-4FDB-B141-137C8960C7F6
Mar 15 10:15:49 localhost kernel[0]: Sandbox: mDNSResponder(51) deny(1) file-read-data /private/var/mobile/Library/Caches/com.apple.MobileGestalt.plist
Mar 15 10:15:49 localhost configd[45]: skipped com.apple.SystemConfiguration.PPPController (disabled)
Mar 15 10:15:49 localhost configd[45]: adding com.apple.SystemConfiguration.KernelEventMonitor
Mar 15 10:15:49 localhost configd[45]: adding com.apple.SystemConfiguration.LinkConfiguration
Mar 15 10:15:49 localhost configd[45]: adding com.apple.SystemConfiguration.PreferencesMonitor
Mar 15 10:15:49 localhost configd[45]: loading com.apple.SystemConfiguration.EAPOLController
Mar 15 10:15:49 localhost mDNSResponder[51]: WiFi:[479700949.166191]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:49 localhost mDNSResponder[51]: WiFi:[479700949.169945]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:49 localhost UserEventAgent[127]: Factory called
Mar 15 10:15:49 localhost mDNSResponder[51]: Note: SetDomainSecrets: no keychain support
Mar 15 10:15:49 localhost mDNSResponder[51]: Note: Compiled without SnowLeopard Fine-Grained Power Management support
Mar 15 10:15:49 localhost configd[45]: loading com.apple.SystemConfiguration.IPConfiguration
Mar 15 10:15:49 localhost com.apple.AppleHDQGasGauge[127]: gasgauge: updateThread start
Mar 15 10:15:49 localhost UserEventAgent[127]: (Note ) PIH: MCUEAPlugin initialized.
Mar 15 10:15:49 localhost UserEventAgent[127]: Querying interface
Mar 15 10:15:49 localhost UserEventAgent[127]: (Error) MC: performBootTimeChecks is no longer available
Mar 15 10:15:49 localhost com.apple.AppleHDQGasGauge[127]: gasgauge: updateThread restricted(0, 0x0), critical(1, 0x4), config=0x0, cfd=0
Mar 15 10:15:49 localhost com.apple.framework.netrb[127]: connection 0x16669360 to daemon created
Mar 15 10:15:49 localhost com.apple.framework.netrb[127]: listener connection 0x1666c080 created
Mar 15 10:15:49 localhost com.apple.framework.netrb[127]: client 0x1736e200 xpc send -> client create
Mar 15 10:15:49 localhost UserEventAgent[127]: Filtering only beta sessions
Mar 15 10:15:49 localhost UserEventAgent[127]: Session log: no events recorded
Mar 15 10:15:49 localhost locationd[123]: MS:Notice: Injecting: com.apple.locationd locationd
Mar 15 10:15:49 localhost iaptransportd updatePortManagers] - 2526 added PortManager=0x14e87930 service=12291 portNumber=1
Mar 15 10:15:49 localhost UserEventAgent[127]: Couldn't remove /var/mobile/Library/AggregateDictionary/session_events.log. Error: Error Domain=NSCocoaErrorDomain Code=4 "“session_events.log” couldn’t be removed." UserInfo={NSUnderlyingError=0x1657ee50 {Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"}, NSFilePath=/var/mobile/Library/AggregateDictionary/session_events.log, NSUserStringVariant=(
Remove
)}
Mar 15 10:15:49 localhost configd[45]: loading com.apple.SystemConfiguration.CaptiveNetworkSupport
Mar 15 10:15:49 localhost diagnosticd[179]: MS:Notice: Injecting: (null) diagnosticd
Mar 15 10:15:49 localhost lockdownd[49]: MS:Notice: Loading: /Library/MobileSubstrate/DynamicLibraries/afc2dService.dylib
Mar 15 10:15:49 localhost lockdownd[49]: 3ac30000 main: Starting Up - Embedded
Mar 15 10:15:49 localhost MobileGestaltHelper[182]: MS:Notice: Injecting: (null) MobileGestaltHelper
Mar 15 10:15:49 localhost UserEventAgent[127]: user agent networkd: built Aug 7 2015 21:14:16
Mar 15 10:15:49 localhost misd[33]: MS:Notice: Injecting: (null) misd
Mar 15 10:15:49 localhost configd[45]: adding com.apple.SystemConfiguration.IPMonitor
Mar 15 10:15:49 localhost configd[45]: calling bundle load() functions
Mar 15 10:15:49 localhost configd[45]: load() called
Mar 15 10:15:49 localhost configd[45]: bundle ID = com.apple.SystemConfiguration.KernelEventMonitor
Mar 15 10:15:49 localhost configd[45]: load() called
Mar 15 10:15:49 localhost configd[45]: bundle ID = com.apple.SystemConfiguration.LinkConfiguration
Mar 15 10:15:49 localhost configd[45]: IONetworkStack found
Mar 15 10:15:49 localhost configd[45]: load() called
Mar 15 10:15:49 localhost configd[45]: Interface assigned unit 0 (from database)
Mar 15 10:15:49 localhost misd[33]: allowing special port forwarding for test fixtures
Mar 15 10:15:49 localhost com.apple.framework.pf[33]: user 0x14d62e00 xpc send -> delete
Mar 15 10:15:49 localhost UserEventAgent[127]: WiFi:[479700949.711812]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:49 localhost UserEventAgent[127]: WiFi:[479700949.714815]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:49 localhost UserEventAgent[127]: spd:spd_init_state:1890 On launch: this device DOES NOT support WoW
Mar 15 10:15:49 localhost UserEventAgent[127]: spd:spd_wifi_runloop_thread:323 Thread 0x407af000 setting gWiFiRunLoop from 0x0 to 0x16699f70 for WiFiManagerClientRef 0x166997d0
Mar 15 10:15:49 localhost UserEventAgent[127]: spd:spd_default_route_reachability_process_flags:1137 IPv4: not reachable->not reachable, IPv6: not reachable->not reachable
Mar 15 10:15:49 localhost UserEventAgent[127]: spd:init_spd_plugin:1862 spd plug-in initialized successfully 0x16699c40
Mar 15 10:15:49 localhost UserEventAgent[127]: WiFi:[479700949.718377]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:49 localhost UserEventAgent[127]: WiFi:[479700949.719701]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:49 localhost UserEventAgent[127]: spd:spd_wifi_runloop_thread:333 Thread 0x407af000 Calling CFRunLoopRun
Mar 15 10:15:49 localhost networkd[185]: MS:Notice: Injecting: (null) networkd
Mar 15 10:15:49 localhost UserEventAgent dlsym(initRoutinedEventAgent) failed
Mar 15 10:15:49 localhost coreduetd[201]: MS:Notice: Injecting: com.apple.coreduetd coreduetd
Mar 15 10:15:49 localhost com.apple.AppleHDQGasGauge[127]: disabling DLOG (num_clients=0)
Mar 15 10:15:49 localhost configd[45]: bundle ID = com.apple.SystemConfiguration.PreferencesMonitor
Mar 15 10:15:49 localhost configd[45]: BSD Name: en0, Type: 6, Unit: 0, MAC address: 00:88:65:7b:14:10
Mar 15 10:15:49 localhost configd[45]: Created a new element to watch for com.apple.eapol.control.plist
Mar 15 10:15:49 localhost configd[45]: Interface already has a unit number
Mar 15 10:15:49 localhost configd[45]: BSD Name: pdp_ip0, Type: 255, Unit: 0, MAC address: (null)
Mar 15 10:15:49 localhost configd[45]: Interface already has a unit number
Mar 15 10:15:49 localhost pfd[198]: MS:Notice: Injecting: (null) pfd
Mar 15 10:15:49 localhost configd[45]: BSD Name: pdp_ip1, Type: 255, Unit: 1, MAC address: (null)
Mar 15 10:15:49 localhost configd[45]: Interface already has a unit number
Mar 15 10:15:49 localhost com.apple.pfd[198]: pf debug level set to 'urgent'
Mar 15 10:15:49 localhost com.apple.pfd[198]: no pf starter references held
Mar 15 10:15:49 localhost com.apple.pfd[198]: new peer 0x16e0f3a0
Mar 15 10:15:49 localhost com.apple.pfd[198]: pf is already disabled
Mar 15 10:15:49 localhost com.apple.pfd[198]: 0x16e0f3a0:
{ count = 1, contents =
"type" => : 2001
}
Mar 15 10:15:49 localhost com.apple.pfd[198]: 0x16e0f3a0: Connection invalid
Mar 15 10:15:49 localhost com.apple.framework.pf[33]: connection error: Connection invalid
Mar 15 10:15:49 localhost com.apple.framework.pf[33]: releasing user 0x14d62e00
Mar 15 10:15:49 localhost com.apple.framework.pf[33]: user 0x14e5b360 xpc send -> delete
Mar 15 10:15:49 localhost configd[45]: BSD Name: pdp_ip2, Type: 255, Unit: 2, MAC address: (null)
Mar 15 10:15:49 localhost configd[45]: Interface already has a unit number
Mar 15 10:15:49 localhost configd[45]: BSD Name: pdp_ip3, Type: 255, Unit: 3, MAC address: (null)
Mar 15 10:15:49 localhost backboardd[111]: made new hangtracer connection:0x16d5c560
Mar 15 10:15:49 localhost configd[45]: IOKit quiet
Mar 15 10:15:49 localhost configd[45]: Created a new element to watch for com.apple.IPMonitor.control.plist
Mar 15 10:15:49 localhost backboardd[111]: PUIProgressWindow initWithOptions: 4 contextLevel: 2999 appearance: 0
Mar 15 10:15:49 localhost backboardd[111]: main display width 640 height 1136 framebuffer width 640 height 1136 scale 2 orientation 0
Mar 15 10:15:49 localhost backboardd[111]: PUIProgressWindow not using PreBoard appearance
Mar 15 10:15:49 localhost backboardd[111]: _sideways 0
Mar 15 10:15:49 localhost backboardd[111]: _renderWithIOSurface 0
Mar 15 10:15:49 localhost backboardd[111]: layer position 320 568 bounds 0 0 640 1136
Mar 15 10:15:49 localhost backboardd[111]: PUIProgressWindow trying to load image source for /System/Library/PrivateFrameworks/ProgressUI.framework/apple-logoAT2x~iphone.png
Mar 15 10:15:49 localhost configd[45]: Created a new element to watch for com.apple.SystemConfiguration.plist
Mar 15 10:15:49 localhost configd[45]: calling bundle start() functions
Mar 15 10:15:49 localhost configd[45]: DevUSB: Waiting for lockdownd
Mar 15 10:15:49 localhost configd[45]: Created a new element to watch for com.apple.IPConfiguration.control.plist
Mar 15 10:15:49 localhost backboardd[111]: void __IOHIDPlugInLoadBundles(): Loaded 4 HID plugins
Mar 15 10:15:49 localhost nanoregistryd[192]: MS:Notice: Injecting: (null) nanoregistryd
Mar 15 10:15:49 localhost backboardd[111]: IOHIDService compatibility thread running at priority 63 and schedule 2.
Mar 15 10:15:50 localhost backboardd[111]: [HID] [MT] MTSimpleHIDManager::setPropertyInternal detection mode: 255->0 (deferring until bootloaded)
Mar 15 10:15:50 localhost accountsd[189]: MS:Notice: Injecting: com.apple.accountsd accountsd
Mar 15 10:15:50 localhost com.apple.pfd[198]: new peer 0x16e0f310
Mar 15 10:15:50 localhost com.apple.pfd[198]: pf is already disabled
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f310:
{ count = 1, contents =
"type" => : 2001
}
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f310: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: connection error: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: releasing user 0x14e5b360
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: user 0x14e5b360 xpc send -> delete
Mar 15 10:15:50 localhost com.apple.pfd[198]: new peer 0x16e0f450
Mar 15 10:15:50 localhost com.apple.pfd[198]: pf is already disabled
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f450:
{ count = 1, contents =
"type" => : 2001
}
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f450: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: connection error: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: releasing user 0x14e5b360
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: user 0x14e5b360 xpc send -> delete
Mar 15 10:15:50 localhost com.apple.pfd[198]: new peer 0x16e0f670
Mar 15 10:15:50 localhost com.apple.pfd[198]: pf is already disabled
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f670:
{ count = 1, contents =
"type" => : 2001
}
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f670: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: connection error: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: releasing user 0x14e5b360
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: user 0x14e5b360 xpc send -> delete
Mar 15 10:15:50 localhost com.apple.pfd[198]: new peer 0x16e0f670
Mar 15 10:15:50 localhost com.apple.pfd[198]: pf is already disabled
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f670:
{ count = 1, contents =
"type" => : 2001
}
Mar 15 10:15:50 localhost com.apple.pfd[198]: 0x16e0f670: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: connection error: Connection invalid
Mar 15 10:15:50 localhost com.apple.framework.pf[33]: releasing user 0x14e5b360
Mar 15 10:15:50 localhost configd[45]: Interface not [yet] active
Mar 15 10:15:50 localhost configd[45]: BSD Name: en1, Type: 6, Unit: 1
Mar 15 10:15:50 localhost lockbot[195]: MS:Notice: Injecting: (null) lockbot
Mar 15 10:15:50 localhost mDNSResponder[51]: WiFiD2D_initialize in
Mar 15 10:15:50 localhost mDNSResponder[51]: WiFi:[479700950.383535]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:50 localhost mDNSResponder[51]: WiFi:[479700950.383984]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:50 localhost mDNSResponder[51]: WiFi:[479700950.384817]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:50 localhost mDNSResponder[51]: WiFiD2D_initialize: No WiFi Device found
Mar 15 10:15:50 localhost mDNSResponder[51]: WiFiD2D_initialize success
Mar 15 10:15:50 localhost mDNSResponder[51]: D2DInitialize succeeded
Mar 15 10:15:50 localhost mDNSResponder[51]: Created a new element to watch for com.apple.mDNSResponder.plist
Mar 15 10:15:50 localhost lockbot[195]: 3ac30000 main: lockbot starting...
Mar 15 10:15:50 localhost powerd[109]: MS:Notice: Injecting: com.apple.powerd powerd
Mar 15 10:15:50 localhost wifid[137]: [NO client logger] WIFICLOUDSYNC WiFiCloudSyncEngineCreate: created...
Mar 15 10:15:50 localhost wifid[137]: [NO client logger] WIFICLOUDSYNC WiFiCloudSyncEngineRegisterCallbacks: WiFiCloudSyncEngineCallbacks version - 0, bundle id - com.apple.wifid
Mar 15 10:15:50 localhost backboardd[111]: ___IOHIDSessionScheduleAsyncblock_invoke: thread_id=0x40525000
Mar 15 10:15:50 localhost backboardd[111]: HID Session async scheduling initiated.
Mar 15 10:15:50 localhost backboardd[111]: HID Session async root queue running at priority 63 and schedule 2.
Mar 15 10:15:50 localhost backboardd[111]: HID Session async scheduling complete.
Mar 15 10:15:50 localhost backboardd[111]: Successfully opened the IOHIDSession
Mar 15 10:15:50 localhost backboardd[111]: Name = AppleTSL2581
Mar 15 10:15:50 localhost backboardd[111]: Name = als
Mar 15 10:15:50 localhost backboardd[111]: Found ALS #0 - Orientation 1
Mar 15 10:15:50 localhost backboardd[111]: Monitoring only ALS events? NO
Mar 15 10:15:50 localhost backboardd[111]: Using default queue
Mar 15 10:15:50 localhost backboardd[111]: Found client for ALS with orientation 1
Mar 15 10:15:50 localhost backboardd[111]: Migration complete (if performed). (Elapsed time: 0.00 seconds)
Mar 15 10:15:50 localhost kernel[0]: 000027.957456 wlan0.A[6] setupFirmwareAT3716: Firmware Version: wl0: Jul 2 2015 06:34:13 version 6.25.65.242 (r568412) FWID 01-9510dc89
Mar 15 10:15:50 localhost kernel[0]: 000027.983439 wlan0.A[7] configureDualPowerModeAT23731:Set kFeatureDualPowerMode CLEAR
Mar 15 10:15:50 localhost lockbot[195]: 3ac30000 main: created listener
Mar 15 10:15:50 localhost lockbot[195]: 3ac30000 main: resumed listener
Mar 15 10:15:51 localhost lockbot[195]: 40081000 _mainblock_invoke: got an event
Mar 15 10:15:51 localhost lockbot[195]: 40081000 _mainblock_invoke: got a connection
Mar 15 10:15:51 localhost lockbot[195]: 40081000 _mainblock_invoke: connection from entitled client
Mar 15 10:15:51 localhost lockbot[195]: 40197000 handle_response: got a message
Mar 15 10:15:51 localhost kernel[0]: 000028.151436 wlan0.A[8] configureTrgDiscAT23316:Disabling Enhanced Trigger Disconnect Mode
Mar 15 10:15:51 localhost kernel[0]: 000028.157434 wlan0.A[9] configureECountersAT23438: Error: Unable to set event_log_set_init set 5, size 1400: BCOM Error
Mar 15 10:15:51 localhost kernel[0]: 000028.159436 wlan0.A[10] configureECountersAT23457: Error: Unable to deallocate event_log_set_init set 5, size 0: BCOM Error
Mar 15 10:15:51 localhost kernel[0]: 000028.165474 wlan0.N[11] setupDriverAT2980: State 0x30
Mar 15 10:15:51 localhost kernel[0]: 000028.165595 wlan0.A[12] setVIRTUAL_IF_CREATEAT13680: create virtif role 5
Mar 15 10:15:51 localhost kernel[0]: IO80211VirtualInterface::createIOReporters ap1 provider 0
Mar 15 10:15:51 localhost kernel[0]: IO80211InterfaceMonitor::initWithServiceAndName(): Unable to get fProvider
Mar 15 10:15:51 localhost kernel[0]: AppleBCMWLANIO80211APSTAInterface::init name role 5
Mar 15 10:15:51 localhost kernel[0]: AppleBCMWLANIO80211APSTAInterface::attachToBpf name role 5 successful attach to bpf type 147
Mar 15 10:15:51 localhost kernel[0]: IO80211VirtualInterface::init _controller is 0x385d8a05, provider is 0x7b58f205
Mar 15 10:15:51 localhost kernel[0]: IO80211VirtualInterface::createIOReporters ap1 provider 0x385d8a05
Mar 15 10:15:51 localhost kernel[0]: AppleBCMWLANIO80211APSTAInterface::init role 5
Mar 15 10:15:51 localhost kernel[0]: 000028.171072 wlan0.A[13] setupDriverAT3112: Core Driver Initialization Time 28.171060416
Mar 15 10:15:51 localhost kernel[0]: 000028.171151 wlan0.A[14] initWithProviderAndLoggerAT85:Provider 0x385d8a05, name AppleBCMWLANCore
Mar 15 10:15:51 localhost kernel[0]: initting Scan Manager controller 0x385d8a05 ioservice 0x7b58f205 interface 0x7b610d05 ioservce 0x385d8a05
Mar 15 10:15:51 localhost kernel[0]: bpfAttach len 60 dlt 12
Mar 15 10:15:51 localhost kernel[0]: en0::finishAttachToDataLinkLayer name successful attach to bpf type 147
Mar 15 10:15:51 localhost kernel[0]: IO80211Peer::createIOReporters() init 0x385d8a05, statsid 0
Mar 15 10:15:51 localhost kernel[0]: IO80211Peer::createIOReporters() init 0x385d8a05, statsid 255
Mar 15 10:15:51 localhost lockbot[195]: got an unknown event
Mar 15 10:15:51 localhost lockbot[195]: 40081000 _mainblock_invoke: got an event
Mar 15 10:15:51 localhost lockbot[195]: 40081000 _mainblock_invoke: got a connection
Mar 15 10:15:51 localhost lockbot[195]: 40081000 _mainblock_invoke: connection from entitled client
Mar 15 10:15:51 localhost lockbot[195]: 40197000 handle_response: got a message
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 initialize_pairing_expirations: nothing to do
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 safeopen: open(/private/var/run/lockdown_first_run) failed: No such file or directory
Mar 15 10:15:51 localhost lockbot[195]: got an unknown event
Mar 15 10:15:51 localhost mDNSResponderHelper[205]: MS:Notice: Injecting: (null) mDNSResponderHelper
Mar 15 10:15:51 localhost wifid[137]: WiFi:[479700951.272366]: __WiFiLoggingLogBufferStateUpdate: start logging to temporary buffer.
Mar 15 10:15:51 localhost lockdownd[49]: 40103000 _lockstartlocal_block_invoke: Sending activation records to MAD
Mar 15 10:15:51 localhost lockdownd[49]: 40103000 SendActivationRecord: function entry
Mar 15 10:15:51 localhost lockdownd[49]: 40103000 SendActivationRecord: Removing /private/var/root/Library/Lockdown/activation_records
Mar 15 10:15:51 localhost kernel[0]: Sandbox: mediaserverd(73) deny(1) file-read-data /private/var/mobile/Library/Preferences/com.apple.mediaserverd.plist
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 safeopen: open(/private/var/mobile/Media/ApplicationArchives) failed: No such file or directory
Mar 15 10:15:51 localhost lockdownd[49]: 40103000 SendActivationRecord: AR deletion error: Error Domain=NSCocoaErrorDomain Code=4 "“activation_records” couldn’t be removed." UserInfo={NSUnderlyingError=0x16e629a0 {Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"}, NSFilePath=/private/var/root/Library/Lockdown/activation_records, NSUserStringVariant=(
Remove
)}
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 lockstart_local: Build= 13A452
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 _getdevice_type_internal_block_invoke: product_type: iPhone5,2
Mar 15 10:15:51 localhost wifiFirmwareLoader[107]: WiFiUserClientCompleteMapping return 0
Mar 15 10:15:51 localhost wifiFirmwareLoader[107]: wifiFirmwareLoaderThread exiting with 0
Mar 15 10:15:51 localhost wifiFirmwareLoader[107]: Shutting down
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 _getdevice_type_internal_block_invoke: has_telephony: true, should_hactivate: false
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 _getdevice_type_internal_block_invoke: baseband_class: 3, cert_type 1
Mar 15 10:15:51 localhost lockdownd[49]: 3ac30000 loadproduct_type: using Raptor Certs
Mar 15 10:15:51 localhost powerd[109]: Battery health: Poor
Mar 15 10:15:51 localhost hangtracerd[210]: MS:Notice: Injecting: (null) hangtracerd
Mar 15 10:15:51 localhost mediaserverd[73]:
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.707376 AM [AirPlay] HAL plugin initializing
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.721863 AM [AirPlay] BTLE discovery removing all devices
Mar 15 10:15:51 localhost mediaserverd[73]: WiFi:[479700951.725584]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:51 localhost mediaserverd[73]: WiFi:[479700951.726166]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:51 localhost mediaserverd[73]: WiFi:[479700951.726867]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.727051 AM [AirPlay] BTLE discovery removing all devices
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.729404 AM [AirPlayHALPluginGuts] HAL plugin GUTS initialized
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.733712 AM [AirPlayEndpointManagerMeta] metaManager_createAirPlayEndpointManager Using Meta Endpoint Manager
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.734115 AM [AirPlay] !!! Registered with endpoint server.
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.741628 AM [AirPlay] HAL plugin initialized
Mar 15 10:15:51 localhost mediaserverd[73]: WiFi:[479700951.742167]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.742515 AM [APTransportTrafficRegistrar] APTransportTrafficRegistrar: Deregister AirPlay traffic for AWDL at MAC 00:00:00:00:00:00 with target infra non critical PeerIndication=0 err=-6727
Mar 15 10:15:51 localhost mediaserverd[73]: 2016-03-15 10:15:51.742927 AM [AirPlay] trafficRegistrar_resetRegistrationInternal signalled -6727/0xFFFFE5B9 kNotFoundErr: APTransportTrafficRegistrar: reset registration failed
Mar 15 10:15:51 localhost securityd[213]: MS:Notice: Injecting: (null) securityd
Mar 15 10:15:51 localhost nanoregistryd[192]: 03-15-2016 10:15:50.837: nanoregistryd restarted. "NanoRegistry-175.3" "26" internalInstall=NO
Mar 15 10:15:51 localhost networkd[185]: main networkd-583.1.1 pid 185
Mar 15 10:15:51 localhost awdd[208]: MS:Notice: Injecting: (null) awdd
Mar 15 10:15:52 localhost powerd[109]: powerd process is started
Mar 15 10:15:52 localhost configd[45]: calling bundle prime() functions
Mar 15 10:15:52 localhost configd[45]: prime() called
Mar 15 10:15:52 localhost configd[45]: updating configuration
Mar 15 10:15:52 localhost configd[45]: prime() called
Mar 15 10:15:52 localhost configd[45]: Created a new element to watch for com.apple.captive.control.plist
Mar 15 10:15:52 localhost configd[45]: Update interface link status: lo0:
Mar 15 10:15:52 localhost configd[45]: Update interface link quality: lo0: {
Mar 15 10:15:52 localhost configd[45]: LinkQuality : 100
Mar 15 10:15:52 localhost configd[45]: }
Mar 15 10:15:52 localhost coreduetd[201]: CoreData: Failed to load optimized model at path '/System/Library/PrivateFrameworks/CoreDuetDataModel.framework/CoreDuetDataModel-PR-19621179.omo'
Mar 15 10:15:52 localhost configd[45]: WiFi:[479700952.066372]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:52 localhost configd[45]: WiFi:[479700952.067798]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:52 localhost configd[45]: WiFi:[479700952.068464]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:52 localhost configd[45]: Update interface link status: pdp_ip0: {
Mar 15 10:15:52 localhost configd[45]: Expensive : TRUE
Mar 15 10:15:52 localhost configd[45]: }
Mar 15 10:15:52 localhost ptpd[37]: ptpd: startResponder
Mar 15 10:15:52 localhost configd[45]: Update interface link quality: pdp_ip0:
Mar 15 10:15:52 localhost configd[45]: Update interface link status: pdp_ip1: {
Mar 15 10:15:52 localhost configd[45]: Expensive : TRUE
Mar 15 10:15:52 localhost configd[45]: }
Mar 15 10:15:52 localhost configd[45]: Update interface link quality: pdp_ip1:
Mar 15 10:15:52 localhost kernel[0]: AirPort: Enabled AppleBCMWLANCore (link 0, sys 0, user 1)
Mar 15 10:15:52 localhost kernel[0]: 000029.200990 wlan0.N[15] setPOWERAT13866: [configd]: Setting power state to 1. stateFlags(1)
Mar 15 10:15:52 localhost kernel[0]: 000029.201004 wlan0.N[16] handlePowerStateChangeAT13827: Changing power state from OFF to ON.
Mar 15 10:15:52 localhost kernel[0]: 000029.201016 wlan0.N[17] powerOnAT15372: stateFlags(1001)
Mar 15 10:15:52 localhost configd[45]: Update interface link status: pdp_ip2: {
Mar 15 10:15:52 localhost configd[45]: Expensive : TRUE
Mar 15 10:15:52 localhost configd[45]: }
Mar 15 10:15:52 localhost configd[45]: Update interface link quality: pdp_ip2:
Mar 15 10:15:52 localhost hangtracerd[210]: Re-initialize state file contents.
Mar 15 10:15:52 localhost configd[45]: dhcp_arp_router: en0 SSID unavailable
Mar 15 10:15:52 localhost configd[45]: starting plugin CFRunLoop
Mar 15 10:15:52 localhost hangtracerd[210]: State file set up complete.
Mar 15 10:15:52 localhost hangtracerd[210]: Hang Tracer is not enabled, ending tracking and exiting
Mar 15 10:15:52: --- last message repeated 1 time ---
Mar 15 10:15:52 localhost hangtracerd[210]: Waiting for new clients
Mar 15 10:15:52 localhost configd[45]: Update interface link status: pdp_ip3: {
Mar 15 10:15:52 localhost configd[45]: Expensive : TRUE
Mar 15 10:15:52 localhost configd[45]: }
Mar 15 10:15:52 localhost configd[45]: Update interface link quality: pdp_ip3:
Mar 15 10:15:52 localhost configd[45]: Update interface link status: ap1: {
Mar 15 10:15:52 localhost configd[45]: Active : FALSE
Mar 15 10:15:52 localhost configd[45]: }
Mar 15 10:15:52 localhost configd[45]: Update interface link quality: ap1:
Mar 15 10:15:52 localhost configd[45]: WiFi:[479700952.356317]: bootstrap_look_up of WiFiManager server failed
Mar 15 10:15:52 localhost configd[45]: Update interface link status: en0: {
Mar 15 10:15:52 localhost configd[45]: Active : FALSE
Mar 15 10:15:52 localhost configd[45]: }
Mar 15 10:15:52 localhost configd[45]: Update interface link quality: en0:
Mar 15 10:15:52 localhost configd[45]: Update interface configuration: State:/Network/Interface/lo0/IPv4: {
Mar 15 10:15:52 localhost SpringBoard[79]: MS:Notice: Injecting: com.apple.springboard SpringBoard
Mar 15 10:15:52 localhost SpringBoard[79]: MS:Warning: Entering Safe Mode

As you can see, I don't have many tweaks installed:

FunMaker-5:/Library/MobileSubstrate/DynamicLibraries root# ls -l
total 868
-rwxr-xr-x 1 root wheel 85760 Nov 17 2014 MobileSafety.dylib*
-rw-r--r-- 1 root wheel 118 Nov 17 2014 MobileSafety.plist
-rwxr-xr-x 1 root wheel 166528 Oct 25 04:27 PreferenceLoader.dylib*
-rw-r--r-- 1 root wheel 93 Oct 25 04:27 PreferenceLoader.plist
-rwxr-xr-x 1 root wheel 546688 Mar 12 10:29 MyOwnTweak.dylib*
-rw-r--r-- 1 root wheel 51 Mar 12 10:29 MyOwnTweak.plist
-rwxr-xr-x 1 root wheel 66992 Oct 25 2014 afc2dService.dylib*
-rw-r--r-- 1 root wheel 123 Oct 25 2014 afc2dService.plist

BTW my own tweak doesn't inject into SpringBoard; it hooks a 3rd party App from AppStore.

2 questions:
1. How do I debug safe mode? The syslog doesn't seem to gimme any info.
2. Is safe mode necessarily triggered by dylibs in SpringBoard?

Thanks,
snakeninny

Posts: 1

Participants: 1

Read full topic

@111165 wrote:

Hi,Everybody I've got a problem,I build a program which owner is root , when i touch home button and app get into background,After my closing app,My springboard will play dead,anyone have idea,thanks,My system is IOS 8.1.3 and IOS 8.3

Posts: 1

Participants: 1

Read full topic

@Papillon wrote:

OS X El Captain, Xcode 7.01, Jailbroken iOS 7.1.1

$: lldb
(lldb) platform select remote-ios
Platform: remote-ios
Connected: no
SDK Path: "/Users/papillon/Library/Developer/Xcode/iOS DeviceSupport/8.1 (12B410)"
SDK Roots: [ 0] "/Users/papillon/Library/Developer/Xcode/iOS DeviceSupport/7.1.1 (11D201)"
SDK Roots: [ 1] "/Users/papillon/Library/Developer/Xcode/iOS DeviceSupport/8.1 (12B410)"
SDK Roots: [ 2] "/Users/papillon/Library/Developer/Xcode/iOS DeviceSupport/8.1.2 (12B440)"
(lldb) process connect connect://192.168.1.107:1234
Process 32872 stopped
* thread #1: tid = 0x45a74c, 0x2be7c028 dyld_dyld_start, stop reason = signal SIGSTOP
frame #0: 0x2be7c028 dylddyldstart
dyld`dyldstart:
-> 0x2be7c028 <+0>: mov r8, sp
0x2be7c02c <+4>: sub sp, sp, #16
0x2be7c030 <+8>: bic sp, sp, #7
0x2be7c034 <+12>: ldr r3, [pc, #0x70] ; <+132>
(lldb) image list -h -o -f
[ 0] 0x00012000 0x00011000 /Applications/Preferences.app/Preferences(0x0000000000012000)
[ 1] 0x2beb3000 0x000b3000 /Users/papillon/Library/Developer/Xcode/iOS DeviceSupport/7.1.1 (11D201)/Symbols/usr/lib/dyld
[ 2] 0x000be000 0x000be000 /Library/MobileSubstrate/MobileSubstrate.dylib(0x00000000000be000)
[ 3] 0x32937000 0x018b1000 /Users/papillon/Library/Developer/Xcode/iOS DeviceSupport/7.1.1 (11D201)/Symbols/System/Library/PrivateFrameworks/BulletinBoard.framework/BulletinBoard

The module path here is from OS X, not iOS. The reason may be SDK Roots shown above not including native path?

Posts: 5

Participants: 2

Read full topic

@snakeninny wrote:

As you may have already known, dyld_decache by kennyTM fails on arm64 caches. Since arm64 devices are more popular these days, what's the alternative of dyld_decache on dyld_shared_cache_arm64? Luckily, there is an answer: dsc_extractor, an open-sourced tool from Apple.
Now follow me on patching and compiling dsc_extractor so that it can decache dyld_shared_cache_arm64 as dyld_decache used to do.
P.S. You may need to manually install wget with homebrew.

Download and extract dsc_extractor

192:~ snakeninny$ cd ~
192:~ snakeninny$ mkdir dsc_extractor
192:~ snakeninny$ cd dsc_extractor
192:dsc_extractor snakeninny$ wget http://opensource.apple.com/tarballs/dyld/dyld-210.2.3.tar.gz
--2015-10-17 12:14:44--  http://opensource.apple.com/tarballs/dyld/dyld-210.2.3.tar.gz
Resolving opensource.apple.com... 17.251.224.146
Connecting to opensource.apple.com|17.251.224.146|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 470411 (459K) [application/x-gzip]
Saving to: 'dyld-210.2.3.tar.gz'

dyld-210.2.3.tar.gz                 100%[==================================================================>] 459.39K   230KB/s   in 2.0s   

2015-10-17 12:14:46 (230 KB/s) - 'dyld-210.2.3.tar.gz' saved [470411/470411]

192:dsc_extractor snakeninny$ tar xvf dyld-210.2.3.tar.gz
x dyld-210.2.3/
x dyld-210.2.3/bin/
...

Patch

192:dsc_extractor snakeninny$ cd dyld-210.2.3/launch-cache/
192:launch-cache snakeninny$ touch dsc_extractor.patch

The above command creates an empty file named dsc_extractor.patch under ~/dsc_extractor/dyld-210.2.3/launch-cache. Next copy the contents from here into dsc_extractor.patch and save the file (Note that if you wget or curl the patch file, there'd be an extra newline character at the end of the file, you'd have to remove it manually). Let's continue:

192:launch-cache snakeninny$ patch < dsc_extractor.patch
patching file dsc_extractor.cpp
Hunk #4 succeeded at 485 with fuzz 2.

P.S. MD5 of dsc_extractor.patch should be b54a2e2c9556003a91b04009e9986dba. If you don't get it correct, download this copy dsc_extractor.patch (1.1 KB)

Compile

192:launch-cache snakeninny$ clang++ -o dsc_extractor dsc_extractor.cpp dsc_iterator.cpp
In file included from dsc_extractor.cpp:51:
/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/../include/c++/v1/ext/hash_map:212:5: warning: Use of
      the header <ext/hash_map> is deprecated. Migrate to <unordered_map> [-W#warnings]
#   warning Use of the header <ext/hash_map> is deprecated.  Migrate to <unordered_map>
    ^
1 warning generated.

Decache

Now there's a binary dsc_extractor under ~/dsc_extractor/dyld-210.2.3/launch-cache. Let's test if it works.
1. Copy /System/Library/Caches/com.apple.dyld/dyld_shared_cache_arm64 from iOS to OSX using iFunBox.
2. Run /path/to/dsc_extractor /path/to/dyld_shared_cache_arm64 /path/to/decached/binaries/ on OSX, the output is shown below:

0/969
1/969
2/969
3/969
4/969
5/969
6/969
...

Done. Happy hacking iOS 9

---

References:
1. http://lightbulbone.tumblr.com/post/56546834100/ios-shared-cache-extraction
2. http://ant4g0nist.blogspot.com/2015/04/ios-shared-cache-extraction-to-solve.html
3. http://www.iphonedevwiki.net/index.php?title=Dyld_shared_cache

Posts: 8

Participants: 4

Read full topic

@radj wrote:

I used Google Translate on the page above and I'm getting the idea that it isn't supported yet? Is the translation correct? Just mirroring this here for English folks

Posts: 5

Participants: 3

Read full topic

@snakeninny wrote:

Code in my tweak:

NSLog(@"CNSDebug: %@, %@, %@", [self _valueOfNotificationType:0x10 forSectionInfo:[self.specifier propertyForKey:@"BBSECTION_INFO_KEY"]] , self, [self.specifier propertyForKey:@"BBSECTION_INFO_KEY"]);

What the log prints:

Oct 24 19:45:51 FunMaker-5 Preferences[2424]: CNSDebug: 0, <BulletinBoardAppDetailController 0x182b6200: navItem <UINavigationItem: 0x18884270>, view <UITableView: 0x182b7c00; frame = (0 0; 320 568); autoresize = W+H; gestureRecognizers = <NSArray: 0x1887a610>; layer = <CALayer: 0x188796d0>; contentOffset: {0, -64}; contentSize: {320, 659.5}>>, <BBSectionInfo: 0x175e9d60> Section com.alipay.iphoneclient 'Alipay': shows in NC = NO, Alert style = Banner, Lockscreen = YES, External = YES, Push settings = [s:BSA] [e:BSA], allows notifications = YES

Note that the process is Preferences; the return value is 0; the BulletinBoardAppDetailController object and BBSectionInfo object are at memory address 0x182b6200 and 0x175e9d60 respectively.
Now let me call the same method with the same caller and arguments in Cycript:

FunMaker-5:~ root# cycript -p Preferences
cy# controller = #0x182b6200
#"<BulletinBoardAppDetailController 0x182b6200: navItem <UINavigationItem: 0x18884270>, view <UITableView: 0x182b7c00; frame = (0 0; 320 568); autoresize = W+H; gestureRecognizers = <NSArray: 0x1887a610>; layer = <CALayer: 0x188796d0>; contentOffset: {0, 0}; contentSize: {320, 659.5}>>"
cy# sectionInfo = #0x175e9d60
#"<BBSectionInfo: 0x175e9d60> Section com.alipay.iphoneclient 'Alipay': shows in NC = NO, Alert style = Banner, Lockscreen = YES, External = YES, Push settings = [s:BSA] [e:BSA], allows notifications = YES"
cy# [controller _valueOfNotificationType:0x10 forSectionInfo:sectionInfo]
@true

Everything is all the same except that the return value is 1. Why?

Posts: 1

Participants: 1

Read full topic