{"id":192,"date":"2026-04-04T18:55:00","date_gmt":"2026-04-04T10:55:00","guid":{"rendered":"http:\/\/www.millscience.cn\/?p=192"},"modified":"2026-04-04T18:55:05","modified_gmt":"2026-04-04T10:55:05","slug":"reverse2-2","status":"publish","type":"post","link":"https:\/\/www.millscience.cn\/index.php\/reverse2-2\/","title":{"rendered":"\u7ed5\u8fc7\u4e00\u4e2aapp\u7684frida\u68c0\u6d4b(libmsaoaidsec.so\u5e93)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u9047\u5230\u4e00\u4e2aapp\uff0c\u53ebwakeup\u8bfe\u7a0b\u8868\uff0c\u6ce8\u5165frida\u540e\uff0cfrida\u4f1a\u505c\u6b62\u4f46\u662fapp\u6b63\u5e38\u8fd0\u884c<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141636apwrvpblz0y4olpo.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141636apwrvpblz0y4olpo.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u4f55\u5b9a\u4f4d\u6821\u9a8c\u4ee3\u7801\uff1f\u6211\u9009\u62e9hook dlopen ext\u6765\u76d1\u63a7so\u7684\u52a0\u8f7d\uff0c\u5f53\u6267\u884c\u5305\u542b\u68c0\u6d4b\u4ee3\u7801\u7684so\u65f6\uff0capp\u5c31\u4f1a\u8ba9frida\u9000\u51fa<br>\u591a\u6b21\u6267\u884chook\u4ee3\u7801\uff0c\u53d1\u73b0app\u603b\u662f\u5728\u52a0\u8f7dlibmsaoaidsec.so\u540efrida\u9000\u51fa\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141704xkl9k17zzzi4t71e.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141704xkl9k17zzzi4t71e.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c06\u76ee\u6807so\u62d6\u5165idapro\u53cd\u7f16\u8bd1\uff0c\u67e5\u627ejnionload<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;--cbp-line-number-color:#D4D4D4;--cbp-line-number-width:calc(2 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"\u590d\u5236\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>jint JNI_OnLoad(JavaVM *vm, void *reserved)\n{\n  jint v4; \/\/ w19\n  int v5; \/\/ w0\n  __int64 v6; \/\/ x8\n  int *v7; \/\/ x23\n  const char *v8; \/\/ x0\n  void (__fastcall *v10)(JavaVM *, void *); \/\/ &#91;xsp+8h&#93; &#91;xbp-48h&#93; BYREF\n  __int64 v11&#91;2&#93;; \/\/ &#91;xsp+10h&#93; &#91;xbp-40h&#93; BYREF\n\n  v11&#91;1&#93; = *(_QWORD *)(_ReadStatusReg(ARM64_SYSREG(3, 3, 13, 0, 2)) + 40);\n  v11&#91;0&#93; = 0LL;\n  v4 = 65540;\n  if ( (*vm)->GetEnv(vm, (void **)v11, 65540LL) )\n    return -1;\n  _android_log_write(4, \"NagaLinker\", \"v8.83\");\n  v5 = sub_12340(v11&#91;0&#93;);\n  v6 = v11&#91;0&#93;;\n  v7 = off_47FB8;\n  *off_47FB8 = v5;\n  v8 = (const char *)sub_12600(v6);\n  if ( strchr(v8, 77) )\n  {\n    *v7 = 23;\n  }\n  else if ( *v7 >= 24 )\n  {\n    *off_47ED8 = 1;\n  }\n  v10 = 0LL;\n  if ( sub_8734(qword_49248, (__int64)\"JNI_OnLoad\", (__int64 *)&amp;v10) )\n    v10(vm, reserved);\n  return v4;\n}<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M4.5 12.75l6 6 9-13.5\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M16.5 8.25V6a2.25 2.25 0 00-2.25-2.25H6A2.25 2.25 0 003.75 6v8.25A2.25 2.25 0 006 16.5h2.25m8.25-8.25H18a2.25 2.25 0 012.25 2.25V18A2.25 2.25 0 0118 20.25h-7.5A2.25 2.25 0 018.25 18v-1.5m8.25-8.25h-6a2.25 2.25 0 00-2.25 2.25v6\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #D4D4D4\">jint <\/span><span style=\"color: #DCDCAA\">JNI_OnLoad<\/span><span style=\"color: #D4D4D4\">(JavaVM *<\/span><span style=\"color: #9CDCFE\">vm<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #569CD6\">void<\/span><span style=\"color: #D4D4D4\"> *<\/span><span style=\"color: #9CDCFE\">reserved<\/span><span style=\"color: #D4D4D4\">)<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">{<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  jint v4;<\/span><span style=\"color: #6A9955\"> \/\/ w19<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #569CD6\">int<\/span><span style=\"color: #D4D4D4\"> v5;<\/span><span style=\"color: #6A9955\"> \/\/ w0<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  __int64 v6;<\/span><span style=\"color: #6A9955\"> \/\/ x8<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #569CD6\">int<\/span><span style=\"color: #D4D4D4\"> *v7;<\/span><span style=\"color: #6A9955\"> \/\/ x23<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #569CD6\">const<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #569CD6\">char<\/span><span style=\"color: #D4D4D4\"> *v8;<\/span><span style=\"color: #6A9955\"> \/\/ x0<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #569CD6\">void<\/span><span style=\"color: #D4D4D4\"> (__fastcall *v10)(JavaVM *, <\/span><span style=\"color: #569CD6\">void<\/span><span style=\"color: #D4D4D4\"> *);<\/span><span style=\"color: #6A9955\"> \/\/ &#91;xsp+8h&#93; &#91;xbp-48h&#93; BYREF<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  __int64 <\/span><span style=\"color: #9CDCFE\">v11<\/span><span style=\"color: #D4D4D4\">&#91;<\/span><span style=\"color: #B5CEA8\">2<\/span><span style=\"color: #D4D4D4\">&#93;;<\/span><span style=\"color: #6A9955\"> \/\/ &#91;xsp+10h&#93; &#91;xbp-40h&#93; BYREF<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #9CDCFE\">v11<\/span><span style=\"color: #D4D4D4\">&#91;<\/span><span style=\"color: #B5CEA8\">1<\/span><span style=\"color: #D4D4D4\">&#93; = *(_QWORD *)(<\/span><span style=\"color: #DCDCAA\">_ReadStatusReg<\/span><span style=\"color: #D4D4D4\">(<\/span><span style=\"color: #DCDCAA\">ARM64_SYSREG<\/span><span style=\"color: #D4D4D4\">(<\/span><span style=\"color: #B5CEA8\">3<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">3<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">13<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">0<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">2<\/span><span style=\"color: #D4D4D4\">)) + <\/span><span style=\"color: #B5CEA8\">40<\/span><span style=\"color: #D4D4D4\">);<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #9CDCFE\">v11<\/span><span style=\"color: #D4D4D4\">&#91;<\/span><span style=\"color: #B5CEA8\">0<\/span><span style=\"color: #D4D4D4\">&#93; = <\/span><span style=\"color: #B5CEA8\">0LL<\/span><span style=\"color: #D4D4D4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  v4 = <\/span><span style=\"color: #B5CEA8\">65540<\/span><span style=\"color: #D4D4D4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #C586C0\">if<\/span><span style=\"color: #D4D4D4\"> ( (*vm)-&gt;<\/span><span style=\"color: #DCDCAA\">GetEnv<\/span><span style=\"color: #D4D4D4\">(vm, (<\/span><span style=\"color: #569CD6\">void<\/span><span style=\"color: #D4D4D4\"> **)v11, <\/span><span style=\"color: #B5CEA8\">65540LL<\/span><span style=\"color: #D4D4D4\">) )<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">    <\/span><span style=\"color: #C586C0\">return<\/span><span style=\"color: #D4D4D4\"> -<\/span><span style=\"color: #B5CEA8\">1<\/span><span style=\"color: #D4D4D4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #DCDCAA\">_android_log_write<\/span><span style=\"color: #D4D4D4\">(<\/span><span style=\"color: #B5CEA8\">4<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #CE9178\">&quot;NagaLinker&quot;<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #CE9178\">&quot;v8.83&quot;<\/span><span style=\"color: #D4D4D4\">);<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  v5 = <\/span><span style=\"color: #DCDCAA\">sub_12340<\/span><span style=\"color: #D4D4D4\">(<\/span><span style=\"color: #9CDCFE\">v11<\/span><span style=\"color: #D4D4D4\">&#91;<\/span><span style=\"color: #B5CEA8\">0<\/span><span style=\"color: #D4D4D4\">&#93;);<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  v6 = <\/span><span style=\"color: #9CDCFE\">v11<\/span><span style=\"color: #D4D4D4\">&#91;<\/span><span style=\"color: #B5CEA8\">0<\/span><span style=\"color: #D4D4D4\">&#93;;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  v7 = off_47FB8;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  *off_47FB8 = v5;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  v8 = (<\/span><span style=\"color: #569CD6\">const<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #569CD6\">char<\/span><span style=\"color: #D4D4D4\"> *)<\/span><span style=\"color: #DCDCAA\">sub_12600<\/span><span style=\"color: #D4D4D4\">(v6);<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #C586C0\">if<\/span><span style=\"color: #D4D4D4\"> ( <\/span><span style=\"color: #DCDCAA\">strchr<\/span><span style=\"color: #D4D4D4\">(v8, <\/span><span style=\"color: #B5CEA8\">77<\/span><span style=\"color: #D4D4D4\">) )<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  {<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">    *v7 = <\/span><span style=\"color: #B5CEA8\">23<\/span><span style=\"color: #D4D4D4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  }<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #C586C0\">else<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #C586C0\">if<\/span><span style=\"color: #D4D4D4\"> ( *v7 &gt;= <\/span><span style=\"color: #B5CEA8\">24<\/span><span style=\"color: #D4D4D4\"> )<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  {<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">    *off_47ED8 = <\/span><span style=\"color: #B5CEA8\">1<\/span><span style=\"color: #D4D4D4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  }<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  v10 = <\/span><span style=\"color: #B5CEA8\">0LL<\/span><span style=\"color: #D4D4D4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #C586C0\">if<\/span><span style=\"color: #D4D4D4\"> ( <\/span><span style=\"color: #DCDCAA\">sub_8734<\/span><span style=\"color: #D4D4D4\">(qword_49248, (__int64)<\/span><span style=\"color: #CE9178\">&quot;JNI_OnLoad&quot;<\/span><span style=\"color: #D4D4D4\">, (__int64 *)&amp;v10) )<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">    <\/span><span style=\"color: #DCDCAA\">v10<\/span><span style=\"color: #D4D4D4\">(vm, reserved);<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #C586C0\">return<\/span><span style=\"color: #D4D4D4\"> v4;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">}<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u590d\u5236\u4ee3\u7801<\/em>\u8fd9\u91cc\u8c03\u7528\u4e86sub_12340\u548csub_12600\u6765\u8fdb\u884c\u73af\u5883\u68c0\u67e5\uff0c\u8fdb\u5165\u51fd\u6570\u53d1\u73b0\u4f1a\u5bf9\u5b89\u5353api\u548c\u5b89\u5353\u7248\u672c\u53f7\u68c0\u67e5\uff0c\u540e\u9762\u7684if else\u5bf9\u68c0\u67e5\u7ed3\u679c\u8fdb\u884c\u6bd4\u8f83\u3002<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;--cbp-line-number-color:#D4D4D4;--cbp-line-number-width:calc(1 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"\u590d\u5236\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>bool __fastcall sub_8734(__int64 a1, __int64 a2, __int64 *a3)\n{\n  __int64 v4; \/\/ x0\n\n  _ReadStatusReg(ARM64_SYSREG(3, 3, 13, 0, 2));\n  v4 = sub_ED8C(a1, a2);\n  *a3 = v4;\n  return v4 != 0;\n}                       <\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M4.5 12.75l6 6 9-13.5\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M16.5 8.25V6a2.25 2.25 0 00-2.25-2.25H6A2.25 2.25 0 003.75 6v8.25A2.25 2.25 0 006 16.5h2.25m8.25-8.25H18a2.25 2.25 0 012.25 2.25V18A2.25 2.25 0 0118 20.25h-7.5A2.25 2.25 0 018.25 18v-1.5m8.25-8.25h-6a2.25 2.25 0 00-2.25 2.25v6\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #569CD6\">bool<\/span><span style=\"color: #D4D4D4\"> __fastcall <\/span><span style=\"color: #DCDCAA\">sub_8734<\/span><span style=\"color: #D4D4D4\">(__int64 <\/span><span style=\"color: #9CDCFE\">a1<\/span><span style=\"color: #D4D4D4\">, __int64 <\/span><span style=\"color: #9CDCFE\">a2<\/span><span style=\"color: #D4D4D4\">, __int64 *<\/span><span style=\"color: #9CDCFE\">a3<\/span><span style=\"color: #D4D4D4\">)<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">{<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  __int64 v4;<\/span><span style=\"color: #6A9955\"> \/\/ x0<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #DCDCAA\">_ReadStatusReg<\/span><span style=\"color: #D4D4D4\">(<\/span><span style=\"color: #DCDCAA\">ARM64_SYSREG<\/span><span style=\"color: #D4D4D4\">(<\/span><span style=\"color: #B5CEA8\">3<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">3<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">13<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">0<\/span><span style=\"color: #D4D4D4\">, <\/span><span style=\"color: #B5CEA8\">2<\/span><span style=\"color: #D4D4D4\">));<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  v4 = <\/span><span style=\"color: #DCDCAA\">sub_ED8C<\/span><span style=\"color: #D4D4D4\">(a1, a2);<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  *a3 = v4;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">  <\/span><span style=\"color: #C586C0\">return<\/span><span style=\"color: #D4D4D4\"> v4 != <\/span><span style=\"color: #B5CEA8\">0<\/span><span style=\"color: #D4D4D4\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">}                       <\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u590d\u5236\u4ee3\u7801<\/em>\u7136\u540e\u8c03\u7528\u4e86sub8734\u8fdb\u884c\u52a8\u6001\u67e5\u627e\uff0c\u8fd9\u4e2a\u5f88\u53ef\u80fd\u548cfrida\u68c0\u6d4b\u76f8\u5173\uff0c\u627e\u5230\u4e4b\u540e\uff0cv10\u5c31\u4e0d\u662f\u53d8\u91cf\u4e86\u53d8\u6210\u4e86\u76ee\u6807\u5730\u5740\uff0c\u62ff\u5230\u5730\u5740\u540e\u901a\u8fc7jni onload\u6765\u6267\u884c\u3002\uff08\u5927\u6982\u5c31\u662f\u8fd9\u6837\u5427\u53ef\u80fd\u6709\u70b9\u4e71<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/1.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/1.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\uff09<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro cbp-has-line-numbers\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;--cbp-line-number-color:#D4D4D4;--cbp-line-number-width:calc(1 * 0.6 * .875rem);line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#1E1E1E\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#D4D4D4;display:none\" aria-label=\"\u590d\u5236\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>LOAD:0000000000013B28 A0 00 00 34                   CBZ             W0, loc_13B3C\nLOAD:0000000000013B28\nLOAD:0000000000013B2C E8 07 40 F9                   LDR             X8, &#91;SP,#0x50+var_48&#93;\nLOAD:0000000000013B30 E0 03 15 AA                   MOV             X0, X21\nLOAD:0000000000013B34 E1 03 14 AA                   MOV             X1, X20\nLOAD:0000000000013B38 00 01 3F D6                   BLR             X8\nLOAD:0000000000013B38\nLOAD:0000000000013B3C\nLOAD:0000000000013B3C                               loc_13B3C                             <\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M4.5 12.75l6 6 9-13.5\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M16.5 8.25V6a2.25 2.25 0 00-2.25-2.25H6A2.25 2.25 0 003.75 6v8.25A2.25 2.25 0 006 16.5h2.25m8.25-8.25H18a2.25 2.25 0 012.25 2.25V18A2.25 2.25 0 0118 20.25h-7.5A2.25 2.25 0 018.25 18v-1.5m8.25-8.25h-6a2.25 2.25 0 00-2.25 2.25v6\"><\/path><\/svg><\/span><pre class=\"shiki dark-plus\" style=\"background-color: #1E1E1E\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B28<\/span><span style=\"color: #D4D4D4\"> A0 <\/span><span style=\"color: #B5CEA8\">00<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">00<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">34<\/span><span style=\"color: #D4D4D4\">                   CBZ             W0, loc_13B3C<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B28<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B2C<\/span><span style=\"color: #D4D4D4\"> E8 <\/span><span style=\"color: #B5CEA8\">07<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">40<\/span><span style=\"color: #D4D4D4\"> F9                   LDR             X8, &#91;SP,#<\/span><span style=\"color: #B5CEA8\">0x50<\/span><span style=\"color: #D4D4D4\">+var_48&#93;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B30<\/span><span style=\"color: #D4D4D4\"> E0 <\/span><span style=\"color: #B5CEA8\">03<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">15<\/span><span style=\"color: #D4D4D4\"> AA                   MOV             X0, X21<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B34<\/span><span style=\"color: #D4D4D4\"> E1 <\/span><span style=\"color: #B5CEA8\">03<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">14<\/span><span style=\"color: #D4D4D4\"> AA                   MOV             X1, X20<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B38<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">00<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">01<\/span><span style=\"color: #D4D4D4\"> <\/span><span style=\"color: #B5CEA8\">3F<\/span><span style=\"color: #D4D4D4\"> D6                   BLR             X8<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B38<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B3C<\/span><\/span>\n<span class=\"line\"><span style=\"color: #D4D4D4\">LOAD:<\/span><span style=\"color: #F44747\">0000000000013B3C<\/span><span style=\"color: #D4D4D4\">                               loc_13B3C                             <\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u590d\u5236\u4ee3\u7801<\/em>\u56de\u5230\u6c47\u7f16\uff0cblr x8\u5c31\u662fv10(vm, reserved);\u6211\u4eec\u8981\u963b\u6b62\u8fd9\u53e5\u6267\u884c\uff0c\u76f4\u63a5\u5c06CBZ W0, loc_13B3C\u6539\u6210\u65e0\u6761\u4ef6\u8df3\u8f6c\uff0c\u5c31\u7ed5\u8fc7\u4e86\u8fd9\u53e5\u8bdd\u3002<br>\u6253\u5f00010 editer\uff0c\u8df3\u8f6c\u5230\u4ee3\u7801\u5730\u574013B28\uff0c\u5149\u6807\u4f1a\u81ea\u52a8\u5b9a\u4f4d\u539f\u673a\u5668\u7801A0 00 00 34,\u4fee\u6539\u4e3a05 00 00 14\uff0c\u5bf9\u5e94\u6307\u4ee4B loc_13B3C\u5b9e\u73b0\u65e0\u6761\u4ef6\u8df3\u8f6c<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141738bj63zav6xx36neff.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141738bj63zav6xx36neff.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u4fee\u6539\u540e\u4fdd\u5b58\uff0c\u66ff\u6362\u539fso\uff0c\u6253\u5305\u7b7e\u540d\uff0c\u6ce8\u5165frida\u9a8c\u8bc1\uff0c\u6210\u529f\u7ed5\u8fc7<\/p>\n\n\n\n<figure class=\"wp-block-image\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141750m8582uwtmf8t2112.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/www.millscience.cn\/wp-content\/uploads\/2026\/04\/141750m8582uwtmf8t2112.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\"\/><\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>\u9047\u5230\u4e00\u4e2aapp\uff0c\u53ebwakeup\u8bfe\u7a0b\u8868\uff0c\u6ce8\u5165frida\u540e\uff0cfrida\u4f1a\u505c\u6b62\u4f46\u662fapp\u6b63\u5e38\u8fd0\u884c \u5982\u4f55\u5b9a\u4f4d\u6821\u9a8c\u4ee3\u7801\uff1f [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":193,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"class_list":["post-192","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-reverse"],"_links":{"self":[{"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/posts\/192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/comments?post=192"}],"version-history":[{"count":1,"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/posts\/192\/revisions"}],"predecessor-version":[{"id":199,"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/posts\/192\/revisions\/199"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/media\/193"}],"wp:attachment":[{"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/media?parent=192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/categories?post=192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.millscience.cn\/index.php\/wp-json\/wp\/v2\/tags?post=192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}