微信小程序JSAPI调用原理逆向分析

var s = e.__ctx_bridge.condomPrototype(n);
_.onReady((()=>{
    if (!0 === _.useHighPerformanceMode)
        return a.Z.wx = e.wx,
        void (e.doAuditsInjectLogic && e.doAuditsInjectLogic({
            globalWx: a.Z.wx
        }));
    if (s) {
        var t;
        if (o)
            o = i(_.expt, e.wx, o),
            a.Z.wx = o;
        else
            a.Z.wx = y.condomWX(e.wx, e.skipCondom, null === (t = e.__wxConfig) || void 0 === t ? void 0 : t.expt)
    } else {
        var r;
        if (o)
            return o = i(_.expt, e.wx, o),
            a.Z.wx = o,
            void (e.doAuditsInjectLogic && e.doAuditsInjectLogic({
                globalWx: a.Z.wx
            }));
        a.Z.wx = y.condomWX(e.wx, e.skipCondom, null === (r = e.__wxConfig) || void 0 === r ? void 0 : r.expt)
    }
    e.doAuditsInjectLogic && e.doAuditsInjectLogic({
        globalWx: a.Z.wx
    }),
    e.isPlayableEnv && (a.Z.wx = e.mockPlayableEnv(a.Z))
}
)),

fe = (e,t=[],r={})=>{
    V(e),
    Object.setPrototypeOf(e, Object.prototype);
    var o = function() {
        var t, r = n[a], o = Object.getOwnPropertyDescriptor(e, a) || {};
        Object.defineProperty(e, a, {
            get() {
                var e, n = Object.prototype.hasOwnProperty.call(o, "value") ? o.value : null === (e = o.get) || void 0 === e ? void 0 : e.call(this);
                if (t)
                    return t;
                if (r) {
                    var a = n;
                    return 1 & r && (e=>{
                        R.add(e)
                    }
                    )(a),
                    2 & r && (e=>{
                        M.add(e)
                    }
                    )(a),
                    t = q(a)
                }
                if ("function" == typeof n && !t) {
                    var i = function() {
                        return this instanceof i ? Reflect.construct(n, arguments, n) : Reflect.apply(n, this, arguments)
                    };
                    return Object.defineProperty(i, "name", {
                        value: n.name
                    }),
                    t = i,
                    i
                }
                return t = n
            },
            set(e) {
                Object.prototype.hasOwnProperty.call(o, "value") && (o.value = e)
            },
            enumerable: !0,
            configurable: !0
        })
    };
    for (var a of Object.keys(e))
        o()
}

mQe = O()(Yze.prototype, "getLocation", [XOe, eLe, tLe, rLe], {
    configurable: !0,
    enumerable: !0,
    writable: !0,
    initializer: function() {
        return GV
    }
}),

XOe = Bwe(),
eLe = zwe("declare"),
tLe = zce(.05),
rLe = Cwe(),

function Bwe() {
    return jt("privacy", {
        hookHandlers: {
            paramHandler(...e) {
                this.params = e
            },
            asyncPrepositive() {
                return (0,
                Eb.B)() || zf([this.api], !0) ? Promise.resolve([!1]) : (0,
                _f._)(this.api).then((({success: e, errMsg: t, errno: r})=>e ? [!1] : [!0, t, r])).catch((e=>[!1]))
            }
        },
        getState: ()=>({
            modifyArgs: !0
        })
    })
}

function zwe(e) {
    return jt("privateApi", {
        hookHandlers: {
            beforeExecute() {
                if ("declare" === e) {
                    var t, r, a, n, i = +(null === (t = $.default.appContactInfo) || void 0 === t || null === (r = t.operationInfo) || void 0 === r || null === (a = r.jsonInfo) || void 0 === a || null === (n = a.privacy) || void 0 === n ? void 0 : n.locationPrivateInfosCheckStatus), o = $.default.requiredPrivateInfos, s = o && o.indexOf(this.api) >= 0, l = !("release" !== $.default.envVersion || 1 !== i || o && s), c = "release" !== $.default.envVersion && o && !s;
                    return !l && !c || [Ct, "the api need to be declared in the requiredPrivateInfos field in app.json/ext.json", ()=>console.error(`wx.${this.api} need to be declared in the requiredPrivateInfos field in app.json/ext.json`)]
                }
                if ("permission" === e) {
                    var u = this.api
                    , d = qwe[u].permissionByte;
                    if ((0,
                    Q.J7)(d))
                        return [Ct, "no permission"]
                }
            }
        },
        getState: ()=>({
            api: void 0
        })
    })
}

function zce(e, t=!1, r=0, a=!1) {
    return jt("report", {
        hookHandlers: {...},
        getState: ()=>({
            api: void 0,
            prefix: void 0,
            uuid: void 0,
            params: void 0,
            invokeTime: void 0,
            report: void 0,
            shouldBelieveAsync: void 0,
            hasCheckReq: void 0,
            subContext: r,
            deep: 2
        })
    })
}

function Cwe() {
    return jt("promised", {
        hookHandlers: {
            paramHandler(...e) {
                var t = e[0] || {}
                , {success: r, fail: a, complete: n} = t;
                if (!(r || a || n)) {
                    this.promise = new Promise(((e,t)=>{
                        this.resolve = e,
                        this.reject = t
                    }
                    ));
                    var i = this.promise.then.bind(this.promise)
                    , o = this.promise.catch.bind(this.promise)
                    , s = !1
                    , l = !1;
                    o((e=>{
                        s && !l && k.thirdErrorReport({
                            error: e
                        })
                    }
                    )),
                    this.promise.then = (...e)=>("function" == typeof e[0] && (s = !0),
                    "function" == typeof e[1] && (l = !0),
                    i(...e)),
                    this.promise.catch = e=>(l = !0,
                    o(e)),
                    kwe.promise = this.promise
                }
            },
            resultHandler(e) {
                var t, r;
                if (null !== (t = this.otherDecoratorStates.checkTapPermission) && void 0 !== t && t.refuseExec)
                    return Pt;
                if (null !== (r = this.otherDecoratorStates.apiCache) && void 0 !== r && r.cacheInfo.cache) {
                    if (this.promise)
                        return (0,
                        Y.tI)(this.otherDecoratorStates.apiCache.cacheInfo.ret) ? this.otherDecoratorStates.apiCache.cacheInfo.ret : (this.resolve(this.otherDecoratorStates.apiCache.cacheInfo.ret),
                        this.promise)
                } else if (this.promise) {
                    var a;
                    return null !== (a = this.otherDecoratorStates) && void 0 !== a && a.apiCache && (this.otherDecoratorStates.apiCache.cacheInfo.rawResult = e),
                    this.promise
                }
                return Pt
            },
            success(e) {
                var t, r, a = null === (t = this.otherDecoratorStates) || void 0 === t || null === (r = t.apiCache) || void 0 === r ? void 0 : r.cacheInfo.ret;
                this.resolve && this.resolve(a || e)
            },
            fail(e) {
                this.reject && this.reject(e)
            }
        },
        getState: ()=>({
            promise: void 0,
            resolve: void 0,
            reject: void 0
        }),
        otherDecoratorStates: ["checkTapPermission", "apiCache"]
    })
}

GV = function(e={}) {
    "gcj02" !== e.type && (e.type = "wgs84");
    var t = _b(e.type);
    if (t)
        setTimeout((()=>(0,
        q.F0)(bb(t, e), $V, e, {})), 100);
    else {
        var r = Date.now()
        , a = VV[e.type]
        , n = WV[e.type];
        if (UV && r - qV < jV)
            zV.push(e);
        else {
            if (r - n >= jV || !a) {
                var i = (0,
                xS.hI)(this);
                return UV = !0,
                qV = Date.now(),
                void FV(e, {
                    afterSuccess(t) {
                        WV[e.type] = r,
                        VV[e.type] = t
                    },
                    afterAll() {
                        UV = !1;
                        var e = zV;
                        zV = [],
                        e.forEach((e=>GV(e)))
                    }
                }, i)
            }
            var o = a.errMsg && 0 === a.errMsg.indexOf("getLocation:ok");
            (0,
            q.FE)({
                name: "getLocation",
                success: o,
                args: e,
                errMsg: a.errMsg,
                res: a
            })
        }
    }
}

FV = (e={},t={},r)=>{
    var a = (0,
    q.qu)(r);
    zf(["scope.userLocation"]) && (a = (0,
    q.aT)(r),
    e.permissionBytes = [1, 1, 1]),
    a($V, e, Object.assign({
        beforeSuccess(t) {
            e.altitude || delete t.altitude
        }
    }, t))
}

q.qu = e=>e?(t,r,a)=>{re(t,r,a,e)}:ae;
q.aT = e=>e?(t,r,a)=>{ce(t,r,a,e)}:ue;

var te, re = ee(!1), ae = (e,t,r)=>{
    W(e) ? (0,
    b.LY)(e, t, r) : re(e, t, r)
}
, ...
, ce = ee(!0), ue = (e,t,r)=>{
    ce(e, t, r)
}
, de = e=>e ? (t,r,a)=>{
    ce(t, r, a, e)
}
: ue

function ee(e) {
    return function (t, r = {}, n = {}, i = "/") {
        var o, s, l, u, d, p = n.notPack;
        ((0, _.Kn)(r) || (r = {}),
            "operateWXData" === t &&
            (r._isFromBaseOperateWXData, delete r._isFromBaseOperateWXData),
            ("openUrl" !== t && "private_openUrl" !== t) ||
            ((o = t),
                (s = r),
                (l = Date.now()),
                (u = s.url || ""),
                (d = N(
                    D(
                        [
                            C.default.appType + 1e3,
                            o,
                            x(),
                            (0, A.Y)().scene,
                            (0, E.L)((0, A.Y)().scene_note || (0, A.Y)().sceneNote),
                            (0, P.c)(s),
                            l,
                            0,
                            (0, T.k)(),
                            (0, T.n)(),
                            (0, A.Y)().sessionid || (0, A.Y)().sessionId,
                            u,
                        ],
                        (0, P.b)(1024),
                    ),
                    ",",
                )),
                k.reportKeyValue({
                    key: "OpenUrl",
                    value: d,
                })),
            (n = (function (e, t) {
                return V(
                    F(e),
                    (r, a) => (
                        "function" == typeof e[a] &&
                        ((r[a] = (0, g.Hw)(e[a], `at api ${t} ${a} callback function`)),
                            (r[a]._argumentsLength = e[a].length)),
                        r
                    ),
                    {},
                );
            })(n, t)));
        var h = H((r = $(B(null), r)), t, n, i);
        k.reportIDKey({
            key: t,
        });
        var f,
            v = {
                keepOriginalParams: ((f = t), w.jP || (w.wZ && U.includes(f))),
            };
        if (
            (c.env.isMagicBrushFrameEnv &&
                r.contextId &&
                ((v.contextId = r.contextId), delete r.contextId),
                !e &&
                "splashad" !== c.env.workerType &&
                "directGame" !== c.env.workerType)
        ) {
            if ((0, w.LU)() && y.g4.has(t) && !(0, y.V8)(t))
                return void h({
                    errMsg: `${t}:fail API has been banned`,
                });
            if (
                (delete r.pluginId,
                    delete r.permissionBytes,
                    "string" == typeof i && Q(i, "wx"))
            ) {
                var m = Z(i);
                v.appId = m;
            }
        }
        ((0, L.B)() && (r || (r = {}), (r.permissionBytes = [1, 1, 1])),
            p && (v.notPack = !0),
            (0, a.dw)(t, r, h, v));
    };
}

function u(e, t, r, i={}) {
    var u = r;
    r = r=>{
        (0,
        s.yZ)(e, t) && (0 === (r.errMsg || `${e}:ok`).indexOf(`${e}:ok`) && l.emit("success", e));
        "function" == typeof u && u(r)
    }
    ,
    "navigateToMiniProgram" !== e && "openUrl" !== e && "private_openUrl" !== e || (t.adUxInfo = t.adUxInfo || (0,
    o.I)(),
    t.commonUxInfo = t.commonUxInfo || (0,
    o.l)());
    var d = i.appId;
    return "splashad" === c.env.workerType || "directGame" === c.env.workerType || a.default.supportInvokeWithAppId || void 0 === d || 4 === a.default.appType || 19 === a.default.appType ? v.invoke(e, t, r, i) : (0,
    n.Gw)((()=>{
        var a = (0,
        n.Dl)(e, d, t);
        v.invoke(e, a, r, i)
    }
    ))
}

invoke(e, t, r, a={}) {
    var n = !0
    , i = !1
    , o = []
    , s = e=>{
        for (var t of (i || (n = !1),
        o))
            t(e, n);
        null == r || r(e)
    }
    ;
    if (Q) {
        var l = e=>{
            o.push(e)
        }
        ;
        for (var c of ae) {
            var u = c(e, t, l);
            if (u)
                return u instanceof Promise ? (u.then((e=>{
                    s(e)
                }
                )),
                !0) : (s(u),
                !1)
        }
        Q.invoke(e, t, s, a)
    } else
        console.error(`[jsbridge] invoke ${e} fail: jsbridge not ready.`, new Error("jsbridge not ready").stack),
        s({
            errMsg: `${e}:fail jsbridge not ready`,
            errno: 4
        });
    return i = !0,
    n
},

invoke(e, r, a, n={}) {
    var i, s, c, u = r;
    S || n.keepOriginalParams || t.directInvokeJS || (n.notPack ? delete n.notPack : r = m.pack(r),
    ("ios" !== l.platform || z || "1" !== (null === (s = l) || void 0 === s || null === (c = s.expt) || void 0 === c ? void 0 : c.clicfg_appbrand_ios_use_jsapi_args_binding)) && (u = V(r || {})));
    if (delete n.keepOriginalParams,
    null !== (i = r) && void 0 !== i && i.noCallback && F())
        return w(e, u, 0, n),
        0;
    var d = o.add(a);
    return $() || C.set(d, e),
    n.highPerformance && (n.highPerformance[d] = r,
    delete n.highPerformance),
    "function" == typeof n.notifyId && n.notifyId(d),
    w(e, u, d, n),
    d
},

function w(e, a, i, o={}) {
    if (n) {
        var s, u, p;
        if ("splashad" === c.env.workerType || "directGame" === c.env.workerType || l.supportInvokeWithAppId)
            s = null === (u = n.invokeHandler) || void 0 === u ? void 0 : u.call(n, e, a, i, o);
        else
            s = null === (p = n.invokeHandler) || void 0 === p ? void 0 : p.call(n, e, a, i);
        d(s, i, void 0)
    } else {
        var h = {
            event: e,
            paramsString: a,
            callbackId: i,
            privateArgs: V(o)
        };
        if (t.isWebMiniGame) {
            d(prompt("webgame_invoke", V(h)), i, void 0)
        } else {
            var f = null == r ? void 0 : r.messageHandlers.invokeHandler.postMessage(h);
            null != f && f.catch && f.catch((t=>{
                var r = console.error.bind(console);
                r("webkit.messageHandlers.invokeHandler.postMessage fail"),
                r(`event=${e}`),
                r("params=", a),
                r("err=", t),
                r("err.code=", t.code),
                r("err.message=", t.message),
                r("err.name=", t.name)
            }
            ))
        }
    }
}

var n = a.WeixinJSCore.invokeHandler;
((a.WeixinJSCore.invokeHandler = function (o, i, c, s) {
    if (!y)
    return (
        console.error(
        "invoke node env not ok; go __invokeHandler__",
        o,
        "worker?",
        E,
        ),
        n(o, i, c, s)
    );
    if (!v(o)) return n(o, i, c, s);
    let u = S[o].getCtrlIndex(),
    l = { name: o, ctrlIndex: u };
    var f = Date.now();
    let d = new r(e, a.WeixinJSCoreAndroid, c, l, m, t);
    d.markStartTime(f);
    var h = function () {
    try {
        var e = i;
        if ("object" != typeof i && ((e = JSON.parse(i)), !p(d, e)))
        return;
        return ((e._invoke_time_ = f), S[o].invoke(d, e));
    } catch (e) {
        return (
        e.no_log ||
            console.error(
            e + "; go __invokeHandler__",
            o,
            "worker?",
            E,
            ),
        n(o, i, c, s)
        );
    }
    };
    try {
    return E && void 0 === m ? h() : t.check(d, l, h) ? h() : "";
    } catch (e) {
    return (
        e.no_log || console.error(e + "; go __invokeHandler__"),
        n(o, i, c, s)
    );
    }
}),
    delete a.javaBroker);

var WeixinJSCore = (function(global) {
    var _WeixinJSCore = global.WeixinJSCore
    if (!_WeixinJSCore) {
        return undefined;
    }

    var __invokeHandler__ = _WeixinJSCore.invokeHandler
    var __invokeHandler2__ = _WeixinJSCore.invokeHandler2
    if (global.NativeGlobal && global.NativeGlobal.invokeHandler) {
        __invokeHandler2__ = global.NativeGlobal.invokeHandler
    } else if (global.workerInvokeJsApi) {
        __invokeHandler2__ = global.workerInvokeJsApi
    }

    var ret = {};
    ret.publishHandler = function(event, data, dst) {
        _WeixinJSCore.publishHandler(event, data, dst)
    }

    ret.invokeHandler = function(api, args, callbackId, privateArgs) {
        if (__invokeHandler2__) {
            privateArgs = privateArgs || ""
            if (typeof privateArgs !== 'string') {
                privateArgs = JSON.stringify(privateArgs)
            }
            return __invokeHandler2__(api, args, callbackId, privateArgs)
        } else {
            return __invokeHandler__(api, args, callbackId)
        }
    }
    if (global.workerInvokeJsApi) {
        // 改为每次都查找 WeixinJSCore.invokeHandler，保证 node 的 hook 能生效
        global.workerInvokeJsApi = function(api, args, callbackId, privateArgs) {
            return ret.invokeHandler(api, args, callbackId, privateArgs)
        }
    }

    return ret
})(this);

NativeGlobal.invokeHandler("getLocation", '{"type":"wgs84"}', 76, {})

package com.tencent.mm.appbrand.commonjni;

// import ...

/* loaded from: classes8.dex */
public class AppBrandCommonBindingJni {
    private static final String TAG = "MicroMsg.AppBrandCommonBindingJni";
    private a mAppBrandDelegate;
    // ...

    static {
        d.f214192a.loadLibrary("wxa-runtime-binding");
    }

    private native void nativeBindTo(long j16, long j17, long j18, long j19);

    private native long nativeCreate(AppBrandCommonBindingJniParams appBrandCommonBindingJniParams);

    // ...

    public void notifyBindTo(long j16, long j17, long j18) {
        long j19 = this.mNativeHandle;
        if (j19 != 0) {
            nativeBindTo(j19, j16, j17, j18);
        }
    }

    public void notifyCreate(AppBrandCommonBindingJniParams appBrandCommonBindingJniParams) {
        long jNativeCreate = nativeCreate(appBrandCommonBindingJniParams);
        this.mNativeHandle = jNativeCreate;
        h.a(TAG, "hy: created with %d", Long.valueOf(jNativeCreate));
    }

    // ...
}

void __fastcall Java_com_tencent_mm_appbrand_commonjni_AppBrandCommonBindingJni_nativeBindTo(
    int a1,            // <-- JNIEnv* env,
    int a2,            // <-- jobject thiz,
    __int64 a3,        // <-- jlong nativeHandle,
    v8::Isolate * a4,  // <-- jlong isolatePtr,
    _QWORD ** a5,      // <-- jlong contextPtr,
    const void * a6    // <-- jlong uvLoopPtr,
) {
    _QWORD * v10; // x0
    _QWORD * v11; // x23
    _QWORD * Handle; // x0
    __int64 v13; // x1
    _BYTE v14[24]; // [xsp+10h] [xbp-30h] BYREF
    _BYTE v15[16]; // [xsp+28h] [xbp-18h] BYREF
    __int64 v16; // [xsp+38h] [xbp-8h]

    v16 = * (_QWORD * )(_ReadStatusReg(TPIDR_EL0) + 40);
    v8::Locker::Initialize((v8::Locker * ) v15, a4);
    v8::Isolate::Enter(a4);
    v8::HandleScope::HandleScope((v8::HandleScope * ) v14, a4);
    v10 = (_QWORD * ) operator new(0x10 u);
    v11 = v10;
    if ( * a5) {
        Handle = (_QWORD * ) v8::HandleScope::CreateHandle(a4, ** a5);
        * v11 = a4;
        v11[1] = 0;
        if (Handle)
            v11[1] = v8::api_internal::GlobalizeReference(a4, * Handle);  // <-- v11 = [isolatePtr, globalRef]
    } else {
        * v10 = a4;
        v10[1] = 0;
    }
    sub_6EBF8(a3, v11, a6);  // <-- BindTo(nativeHandle, v11, uvLoopPtr)
    sub_70FA0(
        2,
        v13,
        "/data/landun/workspace/lib-wxa-common-binding/src/main/jni/runtime/appbrand_runtime_jni.cc",
        "Java_com_tencent_mm_appbrand_commonjni_AppBrandCommonBindingJni_nativeBindTo",
        84,
        "BindTo isolate[%p] context[%p] uv[%p]",
        a4,
        a5,
        a6);
    v8::HandleScope::~HandleScope((v8::HandleScope * ) v14);
    v8::Isolate::Exit(a4);
    v8::Locker::~Locker((v8::Locker * ) v15);
}

void __fastcall sub_6EBF8(__int64 a1, __int64 a2, __int64 a3) {
    v8::Isolate * v5; // x19
    _QWORD * v6; // x8
    _QWORD * v7; // x9
    v8::Context * Handle; // x22
    v8::Context * CurrentContext; // x0
    __int64 v10; // x23
    __int64 v11; // x1
    __int64(__fastcall * v12)(_QWORD); // x8
    __int64 v13; // x0
    __int64 v14; // [xsp+8h] [xbp-38h] BYREF
    _BYTE v15[24]; // [xsp+10h] [xbp-30h] BYREF
    _BYTE v16[16]; // [xsp+28h] [xbp-18h] BYREF
    __int64 v17; // [xsp+38h] [xbp-8h]

    v17 = * (_QWORD * )(_ReadStatusReg(TPIDR_EL0) + 40);
    *(_QWORD * )(a1 + 160) = a2;
    *(_QWORD * )(a1 + 168) = a3;
    sub_6ED80();
    v5 = ** (v8::Isolate ** * )(a1 + 160);
    v8::Locker::Initialize((v8::Locker * ) v16, v5);
    v8::Isolate::Enter(v5);
    v8::HandleScope::HandleScope((v8::HandleScope * ) v15, v5);
    v6 = * (_QWORD ** )(a1 + 160);
    v7 = (_QWORD * ) v6[1];
    if (v7)
        Handle = (v8::Context * ) v8::HandleScope::CreateHandle( * v6, * v7);
    else
        Handle = 0;
    v8::Context::Enter(Handle);
    CurrentContext = (v8::Context * ) v8::Isolate::GetCurrentContext(v5);
    v14 = v8::Context::Global(CurrentContext);
    v10 = sub_50730(v5, a1, & v14);
    sub_4AF24(v5);
    sub_6DA24(
        2,
        v11,
        "/data/landun/workspace/lib-wxa-common-binding/src/main/jni/runtime/appbrand_runtime.cc",
        "BindTo",
        228,
        "[CommonBindg] Binding Finished. NativeGlobal prepared.");
    v12 = * (__int64(__fastcall ** )(_QWORD))(a1 + 448);
    if (v12) {
        v13 = v12( * (_QWORD * )(a1 + 456));
        sub_96494( * (_QWORD * )(a1 + 312), v13);
    }
    sub_962C8( * (_QWORD * )(a1 + 312), a2, v10);
    if ( * (_BYTE * )(a1 + 157))
        sub_4B7E0(v5, a1, & v14);
    v8::Context::Exit(Handle);
    v8::HandleScope::~HandleScope((v8::HandleScope * ) v15);
    v8::Isolate::Exit(v5);
    v8::Locker::~Locker((v8::Locker * ) v16);
}

__int64 __fastcall sub_50730(v8::Object * a1, int * a2, _QWORD * a3) {
    v8::Value * v6; // x0
    __int64 v7; // x1
    v8::Value * v8; // x22
    v8::Isolate * v9; // x1
    __int64 v10; // x21
    __int64 v11; // x20
    __int64 CurrentContext; // x22
    __int64 v13; // x19
    v8::api_internal * v14; // x0
    int v16[2]; // [xsp+0h] [xbp-10h] BYREF
    __int64 v17; // [xsp+8h] [xbp-8h]

    v17 = * (_QWORD * )(_ReadStatusReg(TPIDR_EL0) + 40);
    v6 = (v8::Value * ) sub_493C8(a1, * a3, "NativeGlobal");
    if (v6 && (v8 = v6, (v8::Value::IsObject(v6) & 1) != 0)) {
        sub_4FCB0(
            2,
            v7,
            "/data/landun/workspace/lib-wxa-common-binding/src/main/jni/bindings/binding_native_global.cc",
            "BindTo",
            161,
            "hy: has NativeGlobal, reuse it");
    } else {
        sub_4FCB0(
            2,
            v7,
            "/data/landun/workspace/lib-wxa-common-binding/src/main/jni/bindings/binding_native_global.cc",
            "BindTo",
            158,
            "hy: no NativeGlobal, create new one");
        v8 = (v8::Value * ) v8::Object::New(a1, v9);
    }
    *(_QWORD * ) v16 = v8;
    sub_4917C((int)a1, (int)v8, (int)"invokeHandler", (int)sub_4F804, (v8::Isolate *)a2);
    sub_4917C((int)a1, (int)v8, (int)"initModule", (int)sub_50030, (v8::Isolate *)a2);
    sub_4917C((int)a1, (int)v8, (int)"testV8Crash", (int)sub_4FDC4, (v8::Isolate *)a2);
    sub_512E8(a1, a2, v16);
    sub_4F014(a1);
    if (a2[84] <= 0) {
        sub_5561C(a1, a2, v16);
        sub_51414(a1, a2, v16);
        sub_4917C((int)a1, v16[0], (int)"getCurrentThreadTime", (int)sub_50658, (v8::Isolate *)a2);
        sub_4917C((int)a1, v16[0], (int)"createSignal", (int)sub_4FE60, (v8::Isolate *)a2);
    }
    v10 = * a3;
    v11 = * (_QWORD * ) v16;
    CurrentContext = v8::Isolate::GetCurrentContext(a1);
    v13 = v8::String::NewFromUtf8(a1, "NativeGlobal", 0, 0xFFFFFFFF LL);
    if (!v13)
        v8::api_internal::ToLocalEmpty(0);
    v14 = (v8::api_internal * ) v8::Object::Set(v10, CurrentContext, v13, v11);  // <-- 将NativeGlobal设置到全局对象上
    if (!(_BYTE) v14)
        v8::api_internal::FromJustIsNothing(v14);
    return * (_QWORD * ) v16;
}

[JS层]    NativeGlobal.invokeHandler(...)
          ^
  注入NativeGlobal对象
          ^
      [Native层]
          v
       JNI调用
          v
[Java层]  com.tencent.mm.appbrand.commonjni.AppBrandCommonBindingJni.nativeInvokeHandler(...)

void __fastcall sub_4F804(__int64 a1) {
    v8::Isolate * v2; // x20
    _QWORD v3[4]; // [xsp+0h] [xbp-20h] BYREF

    v3[3] = * (_QWORD * )(_ReadStatusReg(TPIDR_EL0) + 40);
    v2 = * (v8::Isolate ** )( * (_QWORD * ) a1 + 8 LL);
    v8::HandleScope::HandleScope((v8::HandleScope * ) v3, v2);
    sub_4F878(v2, a1);
    v8::HandleScope::~HandleScope((v8::HandleScope * ) v3);
}

// binding_native_global.cc invokeHandlerFunc
void __fastcall sub_4F878(v8::Isolate * a1, int * a2) {
    // ...

    FunctionTemplateData = (v8::External * ) v8::api_internal::GetFunctionTemplateData( *
        (_QWORD * )( * (_QWORD * ) a2 + 8 LL),
        *(_QWORD * ) a2 + 32 LL);
    v5 = v8::External::Value(FunctionTemplateData);

    // ...

    // sub_6364C(&result, invoker, apiNameBuf, argsBuf, privateArgsBuf, callbackId, ...);
    sub_6364C( & v48, v31, v50, & v54, & v52, (unsigned __int64) v29 >> 32, *(unsigned int * )(v5 + 336));

    // ...
}

// appbrand_js_invoker.cc Invoke
void __usercall sub_6364C(
    __int64 a1 @ <X0> ,
    __int64 a2 @ <X1> ,
    unsigned __int8 * a3 @ <X2> ,
    unsigned __int8 * a4 @ <X3> ,
    unsigned int a5 @ <W4> ,
    unsigned int a6 @ <W5> ,
    _QWORD * a7 @ <X8> )
{
    // ...

    sub_62F9C(v9, a2, v22, v128, v26, & v127, & v126, a7, 0, a6, & v117);
}

// appbrand_js_invoker.cc NativeInvokeHandlerImp
__int64 __fastcall sub_62F9C(
    __int64 * a1,
    __int64 a2,
    __int64 a3,
    unsigned int * a4,
    __int64 a5,
    unsigned int * a6,
    unsigned int * a7,
    __int64 a8,
    char a9,
    unsigned int a10,
    unsigned int * a11)
{
    // ...

    v29 = sub_633E0( * (_QWORD * )( * a1 + 216), v23, v27, v28, * a7, a9 & 1, a10, * a11);

    // ...
}

__int64 __fastcall sub_633E0(
    __int64 a1,
    __int64 a2,
    __int64 a3,
    __int64 a4,
    unsigned int a5,
    unsigned __int8 a6,
    int a7,
    int a8)
{
    __int64 v16; // x8
    __int64 v17; // x0
    __int64 v18; // x20
    _QWORD * v19; // x8
    __int64 v20; // x1
    _QWORD v22[2]; // [xsp+10h] [xbp-10h] BYREF

    v22[1] = * (_QWORD * )(_ReadStatusReg(TPIDR_EL0) + 40);
    if ( * (_BYTE * )(a1 + 48))
        v16 = * (_QWORD * )(a1 + 40);
    else
        v16 = * (_QWORD * )(a1 + 24);
    v17 = * (_QWORD * )(v16 + 8);
    v22[0] = 0;
    ( * (void(__fastcall ** )(__int64, _QWORD * , __int64))( * (_QWORD * ) v17 + 48 LL))(v17, v22, 65542);
    v18 = sub_4DA60(v22[0], *(_QWORD * )(a1 + 16), *(_QWORD * )(a1 + 80), a2, a3, a4, a5, a6, a7, a8);
    if (! * (_BYTE * )(a1 + 88)) {
        if ( * (_BYTE * )(a1 + 48))
            v19 = (_QWORD * )(a1 + 40);
        else
            v19 = (_QWORD * )(a1 + 24);
        if ((sub_8135C( * v19) & 1) != 0) {
            sub_63538(
                4,
                v20,
                "/data/landun/workspace/lib-wxa-common-binding/src/main/jni/runtime/j_appbrand_runtime.h",
                "__simple_nativeInvokeHandler",
                36,
                "[MBRELEASE_ASSERT] failed. [%s] __simple_CallObjectMethod failed. [nativeInvokeHandler]",
                "(!(usePrivate ? mPrivateJNI : mJNI.get())->dumpStackIfJavaException())");
            __android_log_assert(
                "(!(usePrivate ? mPrivateJNI : mJNI.get())->dumpStackIfJavaException())",
                "AppBrandCommon",
                "__simple_CallObjectMethod failed. [nativeInvokeHandler]");
        }
    }
    return v18;
}

__int64 sub_4DA60(__int64 a1, __int64 a2, __int64 a3, ...) {
    __int64(__fastcall * v3)(__int64, __int64, __int64, __va_list_tag * ); // x8
    gcc_va_list va1; // [xsp+B0h] [xbp-50h] BYREF
    gcc_va_list va; // [xsp+D8h] [xbp-28h] BYREF
    __int64 v7; // [xsp+F8h] [xbp-8h]

    va_start(va, a3);
    v7 = * (_QWORD * )(_ReadStatusReg(TPIDR_EL0) + 40);
    v3 = * (__int64(__fastcall ** )(__int64, __int64, __int64, __va_list_tag * ))( * (_QWORD * ) a1 + 280 LL);
    va_copy(va1, va);
    return v3(a1, a2, a3, va1);
}

NativeType CallObjectMethodV(JNIEnv *env, jobject obj, jmethodID methodID, va_list args);

__int64 __fastcall sub_6F4E0(__int64 a1) {
    __int64 v2; // x8
    __int64 v3; // x0
    // ...

    v62[1] = * (_QWORD * )(_ReadStatusReg(TPIDR_EL0) + 40);
    if ( * (_BYTE * )(a1 + 48))
        v2 = * (_QWORD * )(a1 + 40);
    else
        v2 = * (_QWORD * )(a1 + 24);
    v3 = * (_QWORD * )(v2 + 8);
    v62[0] = 0;
    ( * (void(__fastcall ** )(__int64, _QWORD * , __int64))( * (_QWORD * ) v3 + 48 LL))(v3, v62, 65542);
    v4 = v62[0];
    v5 = ( * (__int64(__fastcall ** )(_QWORD, _QWORD, const char * , const char * ))( * (_QWORD * ) v62[0] + 264 LL))(
        v62[0],
        *(_QWORD * )(a1 + 8),
        "nativeInvokeHandler",
        "(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;IZII)Ljava/lang/String;");
    v6 = * (unsigned __int8 * )(a1 + 48);
    *(_QWORD * )(a1 + 80) = v5;
    if (v6)
        v7 = (_QWORD * )(a1 + 40);
    else
        v7 = (_QWORD * )(a1 + 24);
    if ((sub_8135C( * v7) & 1) != 0) {
        sub_6DA24(
            4,
            v8,
            "/data/landun/workspace/lib-wxa-common-binding/src/main/jni/runtime/j_appbrand_runtime.h",
            "onJNIMethodRegistry",
            36,
            "[MBRELEASE_ASSERT] failed. [%s] GetMethodID failed. [nativeInvokeHandler]",
            "(!(usePrivate ? mPrivateJNI : mJNI.get())->dumpStackIfJavaException())");
        __android_log_assert(
            "(!(usePrivate ? mPrivateJNI : mJNI.get())->dumpStackIfJavaException())",
            "AppBrandCommon",
            "GetMethodID failed. [nativeInvokeHandler]");
    }
    v9 = ( * (__int64(__fastcall ** )(__int64, _QWORD, const char * , const char * ))( * (_QWORD * ) v4 + 264 LL))(
        v4,
        *(_QWORD * )(a1 + 8),
        "getAsyncableJsApis",
        "()[Ljava/lang/String;");
    v10 = * (unsigned __int8 * )(a1 + 48);
    *(_QWORD * )(a1 + 96) = v9;
    if (v10)
        v11 = (_QWORD * )(a1 + 40);
    else
        v11 = (_QWORD * )(a1 + 24);
    if ((sub_8135C( * v11) & 1) != 0) {
        sub_6DA24(
            4,
            v12,
            "/data/landun/workspace/lib-wxa-common-binding/src/main/jni/runtime/j_appbrand_runtime.h",
            "onJNIMethodRegistry",
            36,
            "[MBRELEASE_ASSERT] failed. [%s] GetMethodID failed. [getAsyncableJsApis]",
            "(!(usePrivate ? mPrivateJNI : mJNI.get())->dumpStackIfJavaException())");
        __android_log_assert(
            "(!(usePrivate ? mPrivateJNI : mJNI.get())->dumpStackIfJavaException())",
            "AppBrandCommon",
            "GetMethodID failed. [getAsyncableJsApis]");
    }

    // ...
}

jmethodID GetMethodID(JNIEnv *env, jclass clazz, const char *name, const char *sig);

package com.tencent.mm.appbrand.commonjni;

// import ...

/* loaded from: classes8.dex */
public class AppBrandCommonBindingJni {
    private static final String TAG = "MicroMsg.AppBrandCommonBindingJni";
    private a mAppBrandDelegate;
    // ...

    public String nativeInvokeHandler(String str, String str2, String str3, int i16, boolean z16, int i17, int i18) {
        return this.mAppBrandDelegate.u(str, str2, str3, i16, z16, i17, i18);
    }

    // ...
}

package com.tencent.luggage.sdk.jsapi.component.service;

// import ...

/* loaded from: classes8.dex */
public abstract class b implements dk.a {

    /* renamed from: d, reason: collision with root package name */
    public final WeakReference f30589d;

    // ...

    @Override // dk.a
    public String u(String str, String str2, String str3, int i16, boolean z16, int i17, int i18) {
        com.tencent.mm.plugin.appbrand.jsruntime.t tVarB;
        if (this.f30589d.get() != null && !this.f30590e.get()) {
            if (i17 > 0) {
                try {
                    tVarB = b(i17);
                } catch (Throwable th6) {
                    m2.n("MicroMsg.AbsAppBrandDelegate", th6, "nativeInvokeHandler", new Object[0]);
                    com.tencent.mm.sdk.platformtools.x3.h(new a(this, th6));
                    return "";
                }
            } else {
                tVarB = null;
            }
            return ((com.tencent.mm.plugin.appbrand.jsapi.m) this.f30589d.get()).Q(str, str2, str3, i16, z16, tVarB, i18);
        }
        m2.e("MicroMsg.AbsAppBrandDelegate", "hy: component released when nativeInvokeHandler: %s, %s, %d, %b", str, str2, Integer.valueOf(i16), Boolean.valueOf(z16));
        String str4 = this.f30591f;
        if (!TextUtils.isEmpty(str4)) {
            try {
                return new JSONObject().put("errMsg", str + ":" + str4).toString();
            } catch (Exception unused) {
            }
        }
        return null;
    }

    // ...
}

public String Q(String r16, String r17, String r18, int r19, boolean r202, com.tencent.mm.plugin.appbrand.jsruntime.c0 r212, int r222) {
    /*
        String r16:   apiName
        String r17:   args
        String r18:   privateArgs
        int r19:      callbackId
        boolean r202: isAsync
        ...
    */
    String r112 = "";
    j0 r56 = t(r16);
    if (r56 != null) goto L300;
    a(r19, S(r16, "fail:not supported"));
    com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "invokeHandler, api: %s not support", new Object[]{r16});
    return "fail:not supported";
L300:
    System.currentTimeMillis();
    boolean r110 = r56 instanceof f;
    C();
    if (r212 != null) goto L303;
    com.tencent.mm.plugin.appbrand.jsruntime.c0 r96 = getF141738e();
L305:
    if (r110 == false) goto L373;
    if (r212 == null) goto L316;
    SparseArray r111 = this.f78928r;
    monitor-enter(r111);
    this.f78928r.put(r19, r212);     // Catch: Throwable -> L312
    monitor-exit(r111);     // Catch: Throwable -> L312
L312:
    th = move-exception;
    throw th;
L316:
    if (((f) r56).z() == false) goto L321;
    if (r202 == false) goto L320;
    com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "hy: should be called in js thread but called in async thread", null);
    return "";
L320:
    O(r56, r17, r18, r19, r96, null);
    r112 = "";
L377:
    C();
    System.currentTimeMillis();
    return r112;
L321:
    if (r202 == false) goto L361;
    boolean r66 = true;
    if (this.f78930t == false) goto L387;
L354:
    if (r66 == false) goto L361;
    this.f78926p.b(r16, r222);
    O(r56, r17, r18, r19, r96, L().getLooper());
    goto L377
L387:
    Field r06 = (Field) bp5.b.a(Looper.class.getField("sThreadLocal"));     // Catch: NoSuchFieldException -> L328 Throwable -> L338 Exception -> L340
L332:
    r06.getType();     // Catch: Throwable -> L338 Exception -> L340
    ThreadLocal r07 = (ThreadLocal) r06.get(Looper.class);     // Catch: Throwable -> L338
    if (r07.get() != null) goto L336;
    r07.set(L().getLooper());     // Catch: Throwable -> L338
L336:
    this.f78930t = true;     // Catch: Throwable -> L338
    com.tencent.mm.sdk.platformtools.m2.j("MicroMsg.AppBrandComponentImpl", "[+] hookLooper succeed", null);
L340:
    e = move-exception;
    throw new bp5.c(e);     // Catch: Throwable -> L338
L328:
    e = move-exception;
    Class r132 = Looper.class;
L381:
    r06 = (Field) bp5.b.a(r132.getDeclaredField("sThreadLocal"));     // Catch: Throwable -> L338 Exception -> L340 NoSuchFieldException -> L342
L342:
    r132 = r132.getSuperclass();     // Catch: Throwable -> L338 Exception -> L340
    if (r132 != null) goto L381;
    throw new bp5.c(e);     // Catch: Throwable -> L338 Exception -> L340
L338:
    th = move-exception;
    com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "hookLooper, t=%s", new Object[]{th});     // Catch: Throwable -> L356
    if (this.f78930t == false) goto L353;
    com.tencent.mm.sdk.platformtools.m2.j("MicroMsg.AppBrandComponentImpl", "[+] hookLooper succeed", null);
L353:
    r66 = false;
L356:
    th = move-exception;
    if (this.f78930t == false) goto L360;
    com.tencent.mm.sdk.platformtools.m2.j("MicroMsg.AppBrandComponentImpl", "[+] hookLooper succeed", null);
L360:
    throw th;
L361:
    te r113 = this.f78926p;
    monitor-enter(r113);
L370:
    th = move-exception;
    throw th;
L364:
    if (r113.f80749b == false) goto L367;
    monitor-exit(r113);
L369:
    L().post(new o(this, r19, r16, r56, r17, r18, r19, r96));
    goto L377
L367:
    r113.f80750c.put(r19, System.currentTimeMillis());     // Catch: Throwable -> L370
    monitor-exit(r113);
    goto L369
L373:
    if (r202 == false) goto L376;
    com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "hy: is sync but called in async thread", null);
    return "";
L376:
    r112 = O(r56, r17, r18, r19, r96, null);
    goto L377
L303:
    r96 = r212;
    goto L305
}

public final String O(j0 j0Var, String str, String str2, int i16, com.tencent.mm.plugin.appbrand.jsruntime.c0 c0Var, Looper looper) {
    if (!c(j0Var.k(), c0Var)) {
        com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "invoke log[%s] api[%s], callbackId[%d], component not running", C(), j0Var.k(), Integer.valueOf(i16));
        return S(j0Var.k(), "fail:interrupted");
    }
    q qVar = new q(this, str, j0Var, str2, i16, c0Var, looper);
    k kVar = this.f78921h;
    if (!(kVar != null && kVar.c(j0Var, str, str2, i16, qVar))) {
        qVar.a();
    }
    return !TextUtils.isEmpty(qVar.f80734a) ? qVar.f80734a : "";
}

package com.tencent.mm.plugin.appbrand.jsapi;

// import ...

/* loaded from: classes8.dex */
public class q extends t1 {

    // ...

    public q(m mVar, String str, j0 j0Var, String str2, int i16, com.tencent.mm.plugin.appbrand.jsruntime.c0 c0Var, Looper looper) {
        this.f80133h = mVar;
        this.f80127b = str;
        this.f80128c = j0Var;
        this.f80129d = str2;
        this.f80130e = i16;
        this.f80131f = c0Var;
        this.f80132g = looper;
    }

    @Override // com.tencent.mm.plugin.appbrand.jsapi.j
    public void a() {
        String strO;
        if (TextUtils.isEmpty(this.f80734a)) {
            Looper looper = this.f80132g;
            if (looper != null && looper != Looper.myLooper()) {
                te teVar = this.f80133h.f78926p;
                int i16 = this.f80130e;
                synchronized (teVar) {
                    if (!teVar.f80749b) {
                        teVar.f80750c.put(i16, System.currentTimeMillis());
                    }
                }
                new Handler(this.f80132g).post(new p(this, this));
                return;
            }
            boolean zC = this.f80133h.c(this.f80128c.k(), this.f80131f);
            if (!zC) {
                com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "invoke handler.proceed() log[%s] api[%s], callbackId[%d], component not running", this.f80133h.C(), this.f80128c, Integer.valueOf(this.f80130e));
            }
            if (zC) {
                try {
                    JSONObject jSONObjectD = m.D(this.f80133h, this.f80127b);
                    try {
                        JSONObject jSONObjectD2 = !TextUtils.isEmpty(this.f80129d) ? m.D(this.f80133h, this.f80129d.trim()) : null;
                        if (jSONObjectD != null && jSONObjectD.optBoolean("noCallback", false)) {
                            this.f80133h.f78931u.put(Integer.valueOf(this.f80130e), Boolean.TRUE);
                        }
                        strO = jSONObjectD == null ? this.f80128c.o("fail:invalid data") : this.f80133h.R(this.f80128c, jSONObjectD, jSONObjectD2, this.f80130e, this.f80131f);
                        m mVar = this.f80133h;
                        j0 j0Var = this.f80128c;
                        String str = this.f80127b;
                        String str2 = this.f80129d;
                        int i17 = this.f80130e;
                        k kVar = mVar.f78921h;
                        if (kVar != null) {
                            kVar.a(j0Var, str, str2, i17, strO);
                        }
                    } catch (OutOfMemoryError e16) {
                        Object[] objArr = new Object[2];
                        objArr[0] = this.f80128c.k();
                        String str3 = this.f80129d;
                        objArr[1] = Integer.valueOf((str3 != null ? str3 : "").length());
                        com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "invokeImpl() parsePrivateDataStr, api[%s], privateData.length[%d]", objArr);
                        throw e16;
                    }
                } catch (OutOfMemoryError e17) {
                    Object[] objArr2 = new Object[2];
                    objArr2[0] = this.f80128c.k();
                    String str4 = this.f80127b;
                    objArr2[1] = Integer.valueOf((str4 != null ? str4 : "").length());
                    com.tencent.mm.sdk.platformtools.m2.e("MicroMsg.AppBrandComponentImpl", "invokeImpl() parseDataStr oom, api[%s], data_length[%d]", objArr2);
                    throw e17;
                }
            } else {
                strO = this.f80128c.o("fail:interrupted");
            }
            if (TextUtils.isEmpty(strO)) {
                return;
            }
            this.f80734a = strO;
            if (this.f80128c instanceof z0) {
                return;
            }
            m mVar2 = this.f80133h;
            com.tencent.mm.plugin.appbrand.jsruntime.c0 jsRuntime = this.f80131f;
            if (jsRuntime == null) {
                jsRuntime = mVar2.getJsRuntime();
            }
            mVar2.E(this.f80130e, strO, jsRuntime);
        }
    }

    @Override // com.tencent.mm.plugin.appbrand.jsapi.j
    public void b(String str) {
        // ...
    }
}