qq视频弹窗消息分析以及拦截处理

1415 uin:*8264 cmd:GSsxJioLMyhkMGI3OzsuFxkF -1767730845 4a8c44dc
04-09 21:04:21.059 5969-6049/com.tencent.mobileqq:MSF I/MSF.S.AppProcessManager: SendToApp PUSH process:com.tencent.mobileqq:video fromServiceMsg: FromServiceMsg msName:onRecvPushMsg ssoSeq:-1767731415 serviceCmd:SharpSvr.s2c appSeq:-1767731415 failCode:1000 cost=4
04-09 21:04:21.059 14969-15031/com.tencent.mobileqq:video D/mqq: [MSF Push]SharpSvr.s2c,ssoseq=-1767731415
04-09 21:04:21.059 14969-15031/com.tencent.mobileqq:video D/VideoServlet: --video-- onReceive msf cmd = SharpSvr.s2c,request = null|296
04-09 21:04:21.059 14969-15031/com.tencent.mobileqq:video W/VideoServlet: avideo onReceive[CMD_SHARPVIDEO_S2C] seq[18512], msg_type[3], type[3], serviceType[1000], roomId[73746444662250961]|1523279061072
04-09 21:04:21.059 14969-15031/com.tencent.mobileqq:video D/VideoServlet: --video-- onSend sharp video message reqType:5|296
04-09 21:04:21.059 5969-6040/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: pa ok: 44296
    netSend ssoSeq:44296 uin:*8264 cmd:GSsxJioLMyhkMGI3Ozsu 44834 4a8c44dc
04-09 21:04:21.069 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1767731415 uin:*8264 cmd:GSsxJioLMyhkMGI3OzsuFxkF -1767731329 cross:0
04-09 21:04:21.079 14969-15022/com.tencent.mobileqq:video I/trae: UpdateConfigPayload  len:0
    str_config_keypath sharp/os:[unkown]
04-09 21:04:21.079 14969-15022/com.tencent.mobileqq:video E/trae: TraeConfig::[INFO] config_os:unkown android,clear config
04-09 21:04:21.079 14969-14969/com.tencent.mobileqq:video I/VcControllerImpl_NativeEventHandler: handleMessage eventId: 93, info: 0, fromUin:694886526
04-09 21:04:21.089 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44296 uin:*8264 cmd:GSsxJioLMyhkMGI3Ozsu 44382 cross:0
04-09 21:04:21.099 14969-15022/com.tencent.mobileqq:video D/VideoPackageUtils:  --- parse video message VideoPacket{roomId=73746444662250961, bodyType=12, uin=35068264, fromuin=0, subServiceType=-1, seq=0, business_flag=0, terminal_switch_flag =false, u32AccountType =0, uint64_group_uin =0}
04-09 21:04:21.099 14969-14969/com.tencent.mobileqq:video I/VcControllerImpl_NativeEventHandler: handleMessage eventId: 2, info: 0, fromUin:694886526
04-09 21:04:21.099 14969-14969/com.tencent.mobileqq:video D/VideoController: avideo onRequestVideo uinType = 0, fromUin = 694886526, extraUin = null, sig = null, onlyAudio = true, bindID=0 ,bindType=0
04-09 21:04:21.099 14969-15022/com.tencent.mobileqq:video D/VideoServlet: --video-- onSend sharp video message reqType:4|331
04-09 21:04:21.099 5969-6040/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: pa ok: 44297
    netSend ssoSeq:44297 uin:*8264 cmd:GSsxJioLMyhkIGIn 44475 4a8c44dc
04-09 21:04:21.099 14969-14969/com.tencent.mobileqq:video D/VideoNodeReporter:  reportByRoomId ,node = 20,value = 1
     reportByRoomId ,node = 6,value = 1
04-09 21:04:21.099 13240-13240/com.tencent.mobileqq D/VideoBroadCastReceiver: onReceive app = com.tencent.mobileqq.app.QQAppInterface@4a8e9d2c,action = tencent.video.v2q.AddMsgSig
04-09 21:04:21.109 13240-13240/com.tencent.mobileqq D/VideoBroadCastReceiver: onReceive app = com.tencent.mobileqq.app.QQAppInterface@4a8e9d2c,action = tencent.av.v2q.StartVideoChat
04-09 21:04:21.109 13240-13240/com.tencent.mobileqq W/AVNotifyCenter: getChatSession, create sessionId[694886526], mAvChatDataMap[0], mActiveChatData[AvChatData_default_0, mRelationId[0], mRelationType[0], mUinType[0], mPeerUin[null], mIsChating[false], mIsWaitting[false]]
    setChating, uinType[0], peerUin[694886526], extraUin[null], isReceiver[true], AvChatData[AvChatData_normal_5, mRelationId[0], mRelationType[0], mUinType[0], mPeerUin[694886526], mIsChating[false], mIsWaitting[false]], mActiveChatData[AvChatData_normal_5, mRelationId[0], mRelationType[0], mUinType[0], mPeerUin[694886526], mIsChating[false], mIsWaitting[false]]
04-09 21:04:21.109 14969-14969/com.tencent.mobileqq:video D/VideoUtils: isQzoneLiveExist, isRunning=false
04-09 21:04:21.109 492-506/? I/MediaFocusControl:  AudioFocus  requestAudioFocus() from android.media.AudioManager@4a9d82f4iwl@4a9f5a28
04-09 21:04:21.109 13240-13240/com.tencent.mobileqq D/VideoBroadCastReceiver: onReceive app = com.tencent.mobileqq.app.QQAppInterface@4a8e9d2c,action = tencent.video.v2q.ACTION_NOTIFY_AUDIO_HAS_BEEN_REQUEST_FOCUSED
04-09 21:04:21.109 14969-14969/com.tencent.mobileqq:video W/HookUI: Application Context attach com.tencent.mobileqq,ATVideoInviteFull
04-09 21:04:21.109 14969-14969/com.tencent.mobileqq:video W/CrashHandler: 崩溃泄露工具已安装
04-09 21:04:21.109 14969-14969/com.tencent.mobileqq:video D/VideoInviteFull: avideo onCreate
04-09 21:04:21.109 14969-14969/com.tencent.mobileqq:video D/VideoInviteActivity: avideo onCreate
04-09 21:04:21.109 492-9978/? I/ActivityManager: START u0 {flg=0x10040000 cmp=com.tencent.mobileqq/com.tencent.av.ui.VideoInviteFull (has extras)} from pid 14969
04-09 21:04:21.119 14969-14969/com.tencent.mobileqq:video W/DeleteInterFilter: delete SCREEN_OFF RECEIVER NAME: jug
04-09 21:04:21.119 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44297 uin:*8264 cmd:GSsxJioLMyhkIGIn 44383 cross:0
04-09 21:04:21.119 14969-14969/com.tencent.mobileqq:video W/DeleteInterFilter: delete SCREEN_ON RECEIVER NAME: jsd
    delete SCREEN_OFF RECEIVER NAME: jsd
04-09 21:04:21.169 13240-13306/com.tencent.mobileqq D/dalvikvm: GC_EXPLICIT freed 6185K, 48% free 26881K/50780K, paused 1ms+3ms, total 32ms
04-09 21:04:21.189 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1767731396 uin:*8264 cmd:GSsxJioLMyhkIGInOzsu -1767731022 cross:0
04-09 21:04:21.199 14969-15031/com.tencent.mobileqq:video D/mqq: [MSF Push]SharpSvr.c2sack,ssoseq=-1767731396
04-09 21:04:21.199 14969-15031/com.tencent.mobileqq:video D/VideoServlet: --video-- onReceive msf cmd = SharpSvr.c2sack,request = null|296
04-09 21:04:21.199 14969-15031/com.tencent.mobileqq:video W/VideoServlet: avideo onReceive[c2s ack], seq[42568], msg_type[13], type[2], serviceType[-1], roomId[73746444662250961]

cmd:GSsxJioLMyhkMGI3Ozsu为弹消息指令

指令大全

04-09 21:07:35.449 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44349 uin:*8264 cmd:GSsxJioLMyhkIGIn 44435 cross:0
04-09 21:07:35.499 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1767628443 uin:*8264 cmd:GSsxJioLMyhkIGInOzsu -1767628149 cross:0
04-09 21:07:41.359 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1767694894 uin:*8264 cmd:GSsxJioLMyhkMGI3 -1767694320 cross:0
04-09 21:07:41.379 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1767694894 uin:*8264 cmd:GSsxJioLMyhkMGI3OzsuFxkF -1767694808 cross:0
04-09 21:07:41.399 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44351 uin:*8264 cmd:GSsxJioLMyhkMGI3Ozsu 44437 cross:0
04-09 21:07:41.449 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44352 uin:*8264 cmd:GSsxJioLMyhkIGIn 44438 cross:0
04-09 21:07:41.509 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1766704200 uin:*8264 cmd:GSsxJioLMyhkIGInOzsu -1766703834 cross:0
04-09 21:07:42.179 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1273933341 uin:*8264 cmd:BS08PTQ9FS85K34GPykVLzkr -1273932879 cross:0
04-09 21:07:52.809 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1273862800 uin:*8264 cmd:BS08PTQ9FS85K34GPykVLzkr -1273861858 cross:0
04-09 21:07:58.589 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1773565723 uin:*8264 cmd:GSsxJioLMyhkMGI3 -1773565445 cross:0
04-09 21:07:58.599 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1766719608 uin:*8264 cmd:GSsxJioLMyhkMGI3 -1766719330 cross:0
04-09 21:07:58.609 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1773565723 uin:*8264 cmd:GSsxJioLMyhkMGI3OzsuFxkF -1773565637 cross:0
04-09 21:07:58.619 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1766719608 uin:*8264 cmd:GSsxJioLMyhkMGI3OzsuFxkF -1766719522 cross:0
04-09 21:07:58.649 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44355 uin:*8264 cmd:GSsxJioLMyhkMGI3Ozsu 44441 cross:0
04-09 21:07:58.649 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44356 uin:*8264 cmd:GSsxJioLMyhkMGI3Ozsu 44442 cross:0
04-09 21:07:58.749 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44358 uin:*8264 cmd:GSsxJioLMyhkIGIn 44444 cross:0
04-09 21:07:58.769 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1767584446 uin:*8264 cmd:GSsxJioLMyhkIGInOzsu -1767584152 cross:0
04-09 21:07:58.789 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44359 uin:*8264 cmd:CS85GDU/FiwpbQUkNjckPhgmIQ 44565 cross:0
04-09 21:07:58.839 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44360 uin:*8264 cmd:CS85GDU/FiwpbQUkNjckPhgmIQ 44566 cross:0
04-09 21:07:59.259 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1273819724 uin:*8264 cmd:BS08PTQ9FS85K34GPykVLzkr -1273818854 cross:0
04-09 21:08:00.399 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1273812193 uin:*8264 cmd:BS08PTQ9FS85K34GPykVLzkr -1273811883 cross:0
04-09 21:08:00.409 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:-1273812180 uin:*8264 cmd:BS08PTQ9FS85K34GPykVLzkr -1273811862 cross:0
04-09 21:08:00.439 5969-6045/com.tencent.mobileqq:MSF D/MSF.C.NetConnTag: netRecv ssoSeq:44362 uin:*8264 cmd:BSo0NgkuJnR6O2VsOAd1 45000 cross:0

在弹窗界面动态注入hook

t.mobileqq:video D/VideoPackageUtils:  --- parse video message VideoPacket{roomId=145804038599853594, bodyType=24, uin=35068264, fromuin=0, subServiceType=1000, seq=25875, business_flag=0, terminal_switch_flag =false, u32AccountType =0, uint64_group_uin =0}
04-09 21:10:20.499 14969-14984/com.tencent.mobileqq:video W/StringCallStack: VideoPackageUtils| --- parse video message VideoPacket{roomId=145804038599853594, bodyType=24, uin=35068264, fromuin=0, subServiceType=1000, seq=25875, business_flag=0, terminal_switch_flag =false, u32AccountType =0, uint64_group_uin =0}
    =====↑值 ↓堆栈===
    java.lang.Throwable
        at (cn.qssq666.autohookallclass.hook.StringHook$3.StringHook.javaafterHookedMethod)(StringHook.java:234)
        at (de.robv.android.xposed.XposedBridge.XposedBridge.javahandleHookedMethod)(XposedBridge.java:645)
        at (java.lang.StringBuilder.StringBuilder.javatoString)(Native Method toString)(StringBuilder.java:-2)
        at (agwz.ProGuardonWriteLog)(ProGuard:1365)
        at (com.tencent.qphone.base.util.QLog.QLog.javawriteLogToFile)(QLog.java:940)
        at (com.tencent.qphone.base.util.QLog.QLog.javaaccess$500)(QLog.java:50)
        at (com.tencent.qphone.base.util.QLog$c.QLog.javahandleMessage)(QLog.java:124)
        at (android.os.Handler.Handler.javadispatchMessage)(Handler.java:102)
        at (android.os.Looper.Looper.javaloop)(Looper.java:136)
        at (android.os.HandlerThread.HandlerThread.javarun)(HandlerThread.java:61)
04-09 21:10:22.299 14969-15022/com.tencent.mobileqq:video W/StringHook: Thread-376
    VideoPacket{roomId=217861632615385581, bodyType=12, uin=35068264, fromuin=0, subServiceType=-1, seq=0, busin

可怕,竟然是loop发送的,哪里到底是哪里调用的似乎搞不懂了.

还是看看主进程有没有呼叫人qq的字符串堆栈打印吧

q:video D/VideoController: avideo onRequestVideo uinType = 0, fromUin = 694886526, extraUin = null, sig = null, onlyAudio = true, bindID=0 ,bindType=0
04-09 21:15:20.749 13240-13240/com.tencent.mobileqq W/StringCallStack: getChatSession, create sessionId[694886526], mAvChatDataMap[0], mActiveChatData[AvChatData_default_0, mRelationId[0], mRelationType[0], mUinType[0], mPeerUin[null], mIsChating[false], mIsWaitting[false]]
    =====↑值 ↓堆栈===
    java.lang.Throwable
        at (cn.qssq666.autohookallclass.hook.StringHook$3.StringHook.javaafterHookedMethod)(StringHook.java:234)
        at (de.robv.android.xposed.XposedBridge.XposedBridge.javahandleHookedMethod)(XposedBridge.java:645)
        at (java.lang.StringBuilder.StringBuilder.javatoString)(Native Method toString)(StringBuilder.java:-2)
        at (com.tencent.av.gaudio.AVNotifyCenter.ProGuarda)(ProGuard:1557)
        at (com.tencent.av.gaudio.AVNotifyCenter.ProGuarda)(ProGuard:1573)
        at (com.tencent.mobileqq.app.VideoBroadcastReceiver.ProGuardd)(ProGuard:684)
        at (com.tencent.mobileqq.app.VideoBroadcastReceiver.ProGuardonReceive)(ProGuard:1474)
        at (android.app.LoadedApk$ReceiverDispatcher$Args.LoadedApk.javarun)(LoadedApk.java:768)
        at (android.os.Handler.Handler.javahandleCallback)(Handler.java:733)
        at (android.os.Handler.Handler.javadispatchMessage)(Handler.java:95)
        at (android.os.Looper.Looper.javaloop)(Looper.java:136)
        at (android.app.ActivityThread.ActivityThread.javamain)(ActivityThread.java:5019)
        at (java.lang.reflect.Method.Method.javainvokeNative)(Native Method invokeNative)(Method.java:-2)
        at (java.lang.reflect.Method.Method.javainvoke)(Method.java:515)
        at (com.android.internal.os.ZygoteInit$MethodAndArgsCaller.ZygoteInit.javarun)(ZygoteInit.java:779)
        at (com.android.internal.os.ZygoteInit.ZygoteInit.javamain)(ZygoteInit.java:595)
        at (de.robv.android.xposed.XposedBridge.XposedBridge.javamain)(XposedBridge.java:132)
        at (dalvik.system.NativeStart.NativeStart.javamain)(Native Method main)(NativeStart.java:-2)
04-09 21:15:20.749 13240-13240/com.tencent.mobileqq W/AVNotifyCenter: getChatSession, create sessionId[694886526], mAvChatDataMap[0], mActiveChatData[AvChatData_default_0, mRelationId[0], mRelationType[0], mUinType[0], mPeerUin[null], mIsChating[false], mIsWaitting[false]]
04-09 21:15:20.749 13240-13240/com.tencent.mobileqq W/StringCallStack: AvChatData_normal_15, mRelation

你可能感兴趣的:(qq视频弹窗消息分析以及拦截处理)