小编点评

**代码摘要：** 代码实现了一个 IXposedHookLoadPackage 接口的实现类，并根据进程名称获取相应的类名称，然后通过反射机制动态加载和注入该类。 **代码结构：** ```java public class Main implements IXposedHookLoadPackage { private boolean flag = false; @Override public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpparam) throws Throwable { String t_packageName = lpparam.packageName; if ("com.mf.xxyzgame.wpp.game.hlqsgdzz.huawei".equals(t_packageName)) { // 注册类加载器 XposedBridge.log("hook!!! in in !! : " + t_packageName); // 获取类加载器 Class<?> aClass = lpparam.classLoader.loadClass("com.mydefinemmpay.tool.MessageUtil"); // 注册构造函数 hook XposedHelpers.findAndHookConstructor(aClass, new XC_MethodHook() { @Override protected void afterHookedMethod(MethodHookParam param) throws Throwable { // 设置成员变量 XposedBridge.log("hook!!! beforeHookedMethod t_free: " + (String)XposedHelpers.getObjectField(param.thisObject, "free")); XposedHelpers.setObjectField(param.thisObject, "free", "1"); XposedBridge.log("hook!!! afterHookedMethod t_free: " + (String)XposedHelpers.getObjectField(param.thisObject, "free")); } }); // 注册初始化方法 hook XposedHelpers.findAndHookMethod(aClass, "init", Context.class, new XC_MethodHook() { @Override protected void beforeHookedMethod(MethodHookParam param) throws Throwable { // 设置成员变量 String t_free = (String)XposedHelpers.getObjectField(param.thisObject, "free"); XposedBridge.log("hook!!! beforeHookedMethod t_free: " + t_free); XposedHelpers.setObjectField(param.thisObject, "free", "1"); XposedBridge.log("hook!!! afterHookedMethod ta_free: " + ta_free); } }); } } } ``` **主要功能：** 1. 获取进程名称 `t_packageName`。 2. 根据进程名称查找相应的类名称。 3. 动态加载和注入该类。 4. 注册构造函数和初始化方法 hook，并在方法执行之前和之后设置成员变量的值。

正文

代码

public class Main implements IXposedHookLoadPackage {

    boolean flag = false;
    @Override
    public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpparam) throws Throwable {
        String t_packageName = lpparam.packageName;

        if ("com.mf.xxyzgame.wpp.game.hlqsgdzz.huawei".equals(t_packageName)) {
            XposedBridge.log("hook!!! in in !! : " + t_packageName);

            Class<?> aClass = lpparam.classLoader.loadClass("com.mydefinemmpay.tool.MessageUtil");
            // hook gouzao fangfa  wuxiao
//            XposedHelpers.findAndHookConstructor(aClass, new XC_MethodHook() {
//                @Override
//                protected void afterHookedMethod(MethodHookParam param) throws Throwable {
//                    super.afterHookedMethod(param);
//                    XposedBridge.log("hook!!! before");
//                    XposedHelpers.setObjectField(param.thisObject, "free", "1");
//                    XposedBridge.log("hook!!! after");
//                }
//            });

            XposedHelpers.findAndHookMethod(aClass, "init", Context.class, new XC_MethodHook() {
                @Override
                protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
                    super.beforeHookedMethod(param);
                    String t_free = (String)XposedHelpers.getObjectField(param.thisObject, "free");
                    XposedBridge.log("hook!!! beforeHookedMethod t_free: " + t_free);
                }

                @Override
                protected void afterHookedMethod(MethodHookParam param) throws Throwable {
                    super.afterHookedMethod(param);
                    XposedBridge.log("hook!!! before");
                    XposedHelpers.setObjectField(param.thisObject, "free", "1");
                    XposedBridge.log("hook!!! after");
                    String ta_free = (String)XposedHelpers.getObjectField(param.thisObject, "free");
                    XposedBridge.log("hook!!! afterHookedMethod ta_free: " + ta_free);
                }
            });
        }
    }
}

这里记录一下

1. t_packageName 其实是对应的是进程名称，而非类所在的包下的名称
2. hook 构造函数，即使在after方法内也是不生效的
3. 可以在hook 普通函数中执行XposedHelpers.setObjectField方法来修改实例的成员变量的值