Some frameworks cannot be decrypted

[ZomkaDEV]

Describe the bug
When decrypting Instagram, I've noticed ipadecrypt had trouble decrypting frameworks that were bundled with it.

To Reproduce
Steps to reproduce the behavior:

1. Try decrypting Instagram
2. Check logs

Expected behavior
Frameworks get decrypted

Environment

• Taurine 1.1.7-3
• 14.5.1
• iPad Air 2

Additional context
None needed.

[ZomkaDEV]

Here are the logs

vulpes@Alisas-MacBook-Pro ipadecrypt % ./ipadecrypt decrypt https://apps.apple.com/us/app/instagram/id389801252
  ✓ ipadecrypt dev · mobile@192.168.0.XXX iOS 14.5.1 arm64 iPad5,3
  ✓ signed in as redacted@email.com (US storefront)
  ✓ found com.burbn.instagram on App Store
  ✓ cached com.burbn.instagram_429.0.0.ipa
  ✓ MinimumOSVersion 16.3 → 14.5.1
  ✓ already installed → /var/containers/Bundle/Application/39DABB98-0190-4CC8-BFEB-0FC04860D3BB/Instagram.app
    · SBS failed on Instagram, falling back to ptrace
    · spawned Instagram via ptrace
    · decrypted Instagram (218.9 MB)
    · event=dyld msgh_bits="0x80001112" msgh_size="356" msgh_remote="0x1907" msgh_local="0x1007" msgh_id="2403" phase="exc_msg"
    · app halted during launch; recovering what was loaded
    · could not decrypt SpotifyiOS in target
    · could not decrypt libavcodec in target
    · could not decrypt GoogleCast in target
    · could not decrypt FBSharedFramework in target
    · could not decrypt libavutil in target
    · spawned InstagramNotificationExtension via ptrace
    · decrypted InstagramNotificationExtension (8.3 MB)
    · event=dyld msgh_size="356" msgh_remote="0x270b" msgh_local="0x1807" msgh_id="2403" phase="exc_msg" msgh_bits="0x80001112"
    · app halted during launch; recovering what was loaded
    · spawned InstagramWidgetExtensionLockScreenCameraControl via ptrace
    · decrypted InstagramWidgetExtensionLockScreenCameraControl (9.9 MB)
    · event=dyld msgh_remote="0x1c03" msgh_local="0x1b0f" msgh_id="2403" phase="exc_msg" msgh_bits="0x80001112" msgh_size="356"
    · app halted during launch; recovering what was loaded
    · spawned InstagramShareExtension via ptrace
    · decrypted InstagramShareExtension (160.0 KB)
    · event=dyld phase="exc_msg" msgh_bits="0x80001112" msgh_size="356" msgh_remote="0x2a03" msgh_local="0x1e03" msgh_id="2403"
    · app halted during launch; recovering what was loaded
    · spawned InstagramWidgetExtension via ptrace
    · decrypted InstagramWidgetExtension (10.4 MB)
    · event=dyld phase="exc_msg" msgh_bits="0x80001112" msgh_size="356" msgh_remote="0x2c03" msgh_local="0x5203" msgh_id="2403"
    · app halted during launch; recovering what was loaded
    · spawned InstagramNotificationContentExtension via ptrace
    · decrypted InstagramNotificationContentExtension (144.0 KB)
    · event=dyld phase="exc_msg" msgh_bits="0x80001112" msgh_size="356" msgh_remote="0x5003" msgh_local="0x2f03" msgh_id="2403"
    · app halted during launch; recovering what was loaded
    · spawned InstagramWidgetExtensionLiveActivities via ptrace
    · decrypted InstagramWidgetExtensionLiveActivities (128.0 KB)
    · event=dyld msgh_id="2403" phase="exc_msg" msgh_bits="0x80001112" msgh_size="356" msgh_remote="0x3203" msgh_local="0x3103"
    · app halted during launch; recovering what was loaded
    · spawned InstagramBroadcastSampleHandlerExtension via ptrace
    · decrypted InstagramBroadcastSampleHandlerExtension (64.0 KB)
    · event=dyld msgh_local="0x3403" msgh_id="2403" phase="exc_msg" msgh_bits="0x80001112" msgh_size="356" msgh_remote="0x4b03"
    · app halted during launch; recovering what was loaded
    · spawned InstagramExtensionLockScreenCamera via ptrace
    · decrypted InstagramExtensionLockScreenCamera (28.3 MB)
    · event=dyld msgh_id="2403" phase="exc_msg" msgh_bits="0x80001112" msgh_size="356" msgh_remote="0x3803" msgh_local="0x3703"
    · app halted during launch; recovering what was loaded
    · packaged → com.burbn.instagram_429.0.0.ipa
  ✓ decrypted 9 image(s): 9 main, 0 framework
  ✓ → /Users/vulpes/Coding/ipadecrypt/com.burbn.instagram_429.0.0.decrypted.ipa
  ✗ 5 binary(ies) still have cryptid != 0
    Payload/Instagram.app/Frameworks/libavutil.framework/libavutil
    Payload/Instagram.app/Frameworks/FBSharedFramework.framework/FBSharedFramework
    Payload/Instagram.app/Frameworks/GoogleCast.framework/GoogleCast
    Payload/Instagram.app/Frameworks/libavcodec.framework/libavcodec
    Payload/Instagram.app/Frameworks/SpotifyiOS.framework/SpotifyiOS

[abdullahsamir06]

try jailbreaking with checkra1n

[londek]

Could you check behavior with 0.7.0?