data/extracted/package_forensics/runs/20260610-expanded-apk-intake/spicybox-ai-video-generator/deep-tools/flutter-aot/arm64-v8a/apk_contents__config.arm64_v8a.apk能还原到什么程度
本轮 blutter 已能看到 Flutter 一方的包名、路由/页面源路径、资源路径、remote config/IAP/广告配置常量和部分控制器/模块命名;不能直接等价为完整 Dart 源码。
核心模块
未发现。
功能信号
| Signal | Value |
|---|---|
| background | 20 |
| gallery | 9 |
| generate | 8 |
| interstitial_ad | 98 |
| native_ad | 837 |
| permission | 14 |
| purchase | 4 |
| reward_ad | 20 |
接口 / URL 线索
- https://docs.flutter.dev/release/breaking-changes/network-policy-ios-android
- https://api.flutter.dev/flutter/dart-ui/ChannelBuffers-class.html
- https://firebase.google.com/docs/flutter/setup
- https://api.getspicybox.com
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Status
- https://pub-3d4a0233f4d046abb14d40b9a07ebdbb.r2.dev/storage/TrainingTutorial.mp4
- https://pub.dev/
- https://api.flutter.dev/flutter/material/Scaffold/of.html
广告点位
| Placement | AdMob IDs |
|---|---|
| interchange | |
| intercon | |
| interface | |
| interfaces | |
| intergeo | |
| internal | |
| internet | |
| interrupted | |
| intersect | |
| interval | |
| native | |
| nativeSpellCheckServiceDefined | |
| open | |
| openMultiple | |
| reward | |
| rewards |
资源和界面素材
| Asset | 命中 |
|---|---|
| assets/images/img_review_bg.png | 1 |
| assets/images/img_app_logo.png | 1 |
| assets/icons/icon_line_chart.png | 1 |
| assets/images/img_logo_pro.png | 1 |
| assets/images/img_add_package.png | 1 |
| assets/icons/icon_more_coins.png | 1 |
| assets/icons/icon_text_video.png | 1 |
| assets/icons/icon_image_video.png | 1 |
| assets/icons/icon_edit_image.png | 1 |
| assets/icons/icon_swap_face.png | 1 |
| assets/icons/icon_add_image.png | 1 |
| assets/icons/icon_face_upload.png | 1 |
| assets/icons/icon_face_person.png | 1 |
| assets/images/img_pro_bg.png | 1 |
边界
- Flutter AOT 产物无法直接恢复完整 Dart 源码;blutter 能恢复大量类名、路径、常量、路由、配置和调用符号。
- 接口 host 若来自运行时 remote config、加密下发或服务端策略,静态包里可能只看到兜底 URL。
- 需要 Frida/HAR/真机行为日志来确认实际请求、付费闸口和广告触发频率。