11-Dump篇-泛型函数调用表

agent/HookImpl.js

@@ -28,13 +28,14 @@ export let HookImpl = {
            let globalHead = module.base.add(0x9AD338).readPointer();
            logHHex(globalHead);
            let metadataReg = module.base.add(0x9AD308).readPointer();
+           let codeReg = module.base.add(0x9AD300).readPointer();
            let injectso = Module.load("/data/data/com.DefaultCompany.Demo1/files/libil2cppdumper.so");
            let nativePointer1 = injectso.findExportByName("_ZN12Il2CppDumper5startEPvS0_S0_S0_");
            console.log("my so inject addr "+nativePointer1)
            let startFun =
                new NativeFunction(nativePointer1,"void",['pointer','pointer','pointer','pointer']);
            let il2cpp = Process.findModuleByName(SoName);
-           startFun(il2cpp.base,globalHead,metadataReg,ptr(0x0));
+           startFun(il2cpp.base,globalHead,metadataReg,codeReg);
 
        },2000);
     }