1.使用reveal查看播放页面的UI布局,查找播放广告的View.(找到QNBPlayerVideoAdsView)
ads.jpeg
2.查看QNBPlayerVideoAdsView的头文件
#import "QNBPlayerIntellectView.h"
@class UIButton;
@interface QNBPlayerVideoAdsView : QNBPlayerIntellectView
{
id <QNBPlayerVideoAdsViewDelegate> _delegate;
QNBPlayerIntellectView *_videoAdsView;
UIButton *_backButton;
}
@property(retain, nonatomic) UIButton *backButton; // @synthesize backButton=_backButton;
@property(retain, nonatomic) QNBPlayerIntellectView *videoAdsView; // @synthesize videoAdsView=_videoAdsView;
@property(nonatomic) __weak id <QNBPlayerVideoAdsViewDelegate> delegate; // @synthesize delegate=_delegate;
- (void).cxx_destruct;
- (void)backBtnClicked:(id)arg1;
- (void)showAdsBackButton:(_Bool)arg1;
- (id)videoAdsSuperView;
- (void)layoutSubviews;
- (id)initWithFrame:(struct CGRect)arg1;
@end
3.尝试使这个view为nil
- (id)initWithFrame:(struct CGRect)arg1{
return nil;
}
4.使用theos重新编译打包,发现点击vip视频闪退
5.使用cydia移除这个插件,使用reveal再次查找有关信息
查到QNBPlayerVideoAdsView所在控制器为QNBPlayerVideoAdsViewController
controller.png
查看控制器QNBPlayerVideoAdsViewController头文件相关信息
#import "QNBBasePlayerViewController.h"
#import "QNBPlayerVideoAdsViewDelegate.h"
@class NSString, UIView;
@interface QNBPlayerVideoAdsViewController : QNBBasePlayerViewController <QNBPlayerVideoAdsViewDelegate>
{
_Bool _adsStartPlay;
UIView *_adTimeCountView;
}
@property(nonatomic) _Bool adsStartPlay; // @synthesize adsStartPlay=_adsStartPlay;
@property(retain, nonatomic) UIView *adTimeCountView; // @synthesize adTimeCountView=_adTimeCountView;
- (void).cxx_destruct;
- (_Bool)didReceivePageLoadQNBVideoInfo:(id)arg1;
- (_Bool)didReceiveStop:(id)arg1;
- (_Bool)didReceiveRequestShowADCountView:(id)arg1;
- (_Bool)didReceiveADStateChange:(id)arg1;
- (_Bool)didReceiveUITipsBarStateChange:(id)arg1;
- (_Bool)didReceivePluginNetworkReachabilityChange:(id)arg1;
- (_Bool)didReceivePlayerStateChange:(id)arg1;
- (_Bool)didReceiveUIScreenModeChange:(id)arg1;
- (_Bool)didReceiveAdsPlayStateChange:(id)arg1;
- (void)hideADTimeCountView;
- (void)showADTimeCountView;
- (double)playerSafeAreaHorizonPadding;
- (void)backBtnClicked:(id)arg1;
- (void)showAdsView;
- (void)updateBackButton;
- (id)videoAdsSuperView;
- (void)viewDidLoad;
- (id)rootView;
- (void)viewWillAppear:(_Bool)arg1;
- (void)viewWillLayoutSubviews;
- (void)loadView;
// Remaining properties
@property(readonly, copy) NSString *debugDescription;
@property(readonly, copy) NSString *description;
@property(readonly) unsigned long long hash;
@property(readonly) Class superclass;
@end
6.分析这个控制器,发现这个控制器名称是带有ads的控制器,猜测播放广告的控制器和播放视频的控制器是分开的,尝试在init方法返回nil;发现此类没有init初始化方法,查看父类QNBBasePlayerViewController
#import "UIViewController.h"
#import "QNBBasePlayerViewControllerEventDelegate.h"
#import "QNBEventDelegate.h"
@class NSMutableArray, NSObject<QNBEventProxy>, NSString, QNBPlayerInfo;
@interface QNBBasePlayerViewController : UIViewController <QNBEventDelegate, QNBBasePlayerViewControllerEventDelegate>
{
_Bool _alreadyAddToParent;
QNBPlayerInfo *_playerInfo;
QNBBasePlayerViewController *_parentEventController;
UIViewController *_parentUIController;
UIViewController *_pageViewController;
NSMutableArray *_childEventControllers;
SEL _interceptReceiveSEL;
NSObject<QNBEventProxy> *_proxy;
}
@property(nonatomic) _Bool alreadyAddToParent; // @synthesize alreadyAddToParent=_alreadyAddToParent;
@property(nonatomic) __weak NSObject<QNBEventProxy> *proxy; // @synthesize proxy=_proxy;
@property(nonatomic) SEL interceptReceiveSEL; // @synthesize interceptReceiveSEL=_interceptReceiveSEL;
@property(retain, nonatomic) NSMutableArray *childEventControllers; // @synthesize childEventControllers=_childEventControllers;
@property(nonatomic) __weak UIViewController *pageViewController; // @synthesize pageViewController=_pageViewController;
@property(nonatomic) __weak UIViewController *parentUIController; // @synthesize parentUIController=_parentUIController;
@property(nonatomic) __weak QNBBasePlayerViewController *parentEventController; // @synthesize parentEventController=_parentEventController;
@property(nonatomic) __weak QNBPlayerInfo *playerInfo; // @synthesize playerInfo=_playerInfo;
- (void).cxx_destruct;
- (void)excuteEvent:(id)arg1 forEventNode:(id)arg2;
- (id)didReceivePlayerEventInUI:(id)arg1;
- (void)shouldSetConstraintsForViews;
- (void)shouldSetupViews;
- (void)addChildEventController:(id)arg1;
- (void)addToParentViewController;
- (void)viewDidLayoutSubviews;
- (id)eventProxy;
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withPageViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5;
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5;
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withAddToParenViewControllerNow:(_Bool)arg4;
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4;
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3;
// Remaining properties
@property(readonly, copy) NSString *debugDescription;
@property(readonly, copy) NSString *description;
@property(readonly) unsigned long long hash;
@property(readonly) Class superclass;
@end
7.发现有5个init开头方法,编写去除QNBPlayerVideoAdsViewController控制器的代码
%hook QNBPlayerVideoAdsViewController
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withPageViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withAddToParenViewControllerNow:(_Bool)arg4{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3{
return nil;
}
%end
结果发现广告页面是没有显示出来,但是还是广告的声音却仍然在播放;播放按钮无法点击,进度条也无法快进,播放下一集的按钮全屏以及其他按钮都可以用,广告控制器都置为nil了,谁在播放广告声音呢?
8.再次查看Reveal, QNBPlayerImageAdsViewController
QLVideoDetailViewController猜测应该是真正视屏内容播放器
经过多次尝试,终于找到播放广告声音的控制器TADVideoAdController
%hook TADVideoAdController
- (id)init{
return nil;
}
%end
这样就完美实现了去除广告
label.png
去除vip首月12元标签
%hook QNBPlayerSimpleIAPButton
- (id)initWithFrame:(struct CGRect)arg1{
return nil;
}
%end
完整去除启动页和播放视屏页广告代码如下
@interface DXClass
- (void)hideSplash;
- (void)endReadTimeCount;
@end
%hook TADSplashWindow
- (void)showSplash{
[self hideSplash];
}
%end
%hook QNBPlayerVideoAdsViewController
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withPageViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withAddToParenViewControllerNow:(_Bool)arg4{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3{
return nil;
}
%end
%hook QNBPlayerImageAdsViewController
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withPageViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4 withAddToParenViewControllerNow:(_Bool)arg5{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withAddToParenViewControllerNow:(_Bool)arg4{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3 withParentEventViewController:(id)arg4{
return nil;
}
- (id)initWithEventProxy:(id)arg1 withPlayerInfo:(id)arg2 withParentViewController:(id)arg3{
return nil;
}
%end
%hook QNBPlayerSimpleIAPButton
- (id)initWithFrame:(struct CGRect)arg1{
return nil;
}
%end
%hook TADVideoAdController
- (id)init{
return nil;
}
%end
