iOS 10 backup structure changed

[jjpprrrr]

The Manifest.mbdb is now a SQLite database file – Manifest.db in iOS 10.0.1. Here is an article regarding this issue: http://smarterforensics.com/2016/09/a-glimpse-of-ios-10-from-a-smartphone-forensic-perspective/

[jjpprrrr]

There is a table called "Files" in Manifest.db, and we can filter out Wechat related files by domain=AppDomain-com.tencent.xin. The "relativePath" column indicates the original name of the file.

[ghost]

That's interesting to learn. I haven't upgraded my iPhone yet. I will definitely look into this issue in a few days, since it seems to impair the main functionality. Thanks very much for reporting this issue and providing you solution.

[laris]

Thanks tiancaihb for this tool.
Waiting for this bug fix.
I already upgraded my iphone to ios10.

[ghost]

@jjpprrrr @laris The latest version (hopefully) supports iOS 10 now.

[jjpprrrr]

Unfortunately it is still shown as 未找到 on my machine.

[ghost]

Sorry about that. I cannot determine the root cause of your problem, but the newly added routine is in v10db.cs. Could you please check if it actually reads something from Manifest.db?
It's not easy for me to do extensive tests on different machines.

[jjpprrrr]

I'm looking into the code right now. I'll let you know if I found anything. Thanks for your quick response!

[laris]

@tiancaihb
it works!
Thanks again!

Win10+iTunes15.5.12.1+ios10.0.1+wechat6.3.27

PS:有没有办法做成增量导出？

[ghost]

@laris 应该不难，看到已有的资源文件跳过即可。因为它们占绝大部分时间（特别是语音的转换和头像/表情下载）。我担心的是，如果有的文件在某次操作中坏了（比如用户把程序干掉了），那它永远都不会再好……但这毕竟是少数，而且用户也可以再选个地方保存。所以我觉得可以加上这个功能。

[kerhbal]

非常感谢！！！ios10已测可以用。

[laris]

@tiancaihb

还有个提议，就是导出的单文件html文件比较大，如果像群聊这种，还有某些长时间聊天记录。
可以考虑加个选项，分割成多少条聊天记录为一个单html。

这样也有利于增量备份的问题。

[ghost]

我本来的想法是html这部分整个由别人完善，因为我做的网页很丑。另外并不能解决增量更新问题，如果用户删了之前的某条聊天记录就整个乱了。
说到这里，我觉得一般的增量更新也不是特别好。比如你删掉一个对话之后又聊了几句，那么localmsgid又会从1开始，意味着可能3.jpg在两次备份中对应了不同的文件。……用servermsgid命名文件可能可以解决。最后，如果用户的头像改了，增量时也要考虑…
先保证所有人都能用起来再说吧