不明觉厉，点赞点赞

正在学习,感谢

正在学习,感谢

楼主很用心了

mu.mem_map(ADDRESS, 2*0x10000)

这段代码在内存地址0x10000处映射了一段大小为2M的内存。

上面这个有点问题吧，2M是2*1024*1024=2*0x100000, 2*0x10000是1/8M吧

mark

太强了,受教受教

大侠出马，一个顶3个

太强了，膜拜

在利用emulator调用so的导出函数时，传入参数后，为什么logging并不会像视频那样输出参数DEBUG信息，最后返回的时候也是none，我的提问地址在：https://www.kanxue.com/question-read-806574.htm

牛逼

tql

666

没搞懂，这个脚本要是要运行在linux系统上吗？有没有更详细一点的教程

太强了，谢谢大佬总结，收获颇丰

终于找到大佬的文章了

66

大佬，请问 《Unicorn 调用SO框架已成，实战调用》，这些文章不公开了嘛，我看印象笔记分享的文章中，找不到这个文章的连接了。

太强了，学习学习

强大的可怕

超赞，感谢分享！！

重温经典 醍醐灌顶 不胜感激

(self.address_ptr, self.address) = hooker.write_function_table({
    4: self.get_version,
    5: self.define_class,
    6: self.find_class,
    7: self.from_reflected_method,
    8: self.from_reflected_field,
    9: self.to_reflected_method,
    10: self.get_superclass,
    11: self.is_assignable_from,
    12: self.to_reflected_field,
    13: self.throw,
    14: self.throw_new,
    15: self.exception_occurred,
    16: self.exception_describe,
    17: self.exception_clear,
    18: self.fatal_error,
    19: self.push_local_frame,
    20: self.pop_local_frame,
    21: self.new_global_ref,
    22: self.delete_global_ref,
    23: self.get_class_loader,
    24: self.get_class_path,
    25: self.load_class,
    26: self.invoke_method,
    27: self.invoke_constructor,
    28: self.get_static_field,
    29: self.set_static_field,
    30: self.get_instance_field,
    31: self.set_instance_field,
    32: self.create_array,
    33: self.allocate_object,
    34: self.get_method_descriptor,
    35: self.get_field_descriptor,
    36: self.get_class_name,
    37: self.get_method_name,
    38: self.get_field_name,
    39: self.get_class_loader_name,
    40: self.get_stack_trace,
    41: self.get_local_variable,
    42: self.get_class_loader_path,
    43: self.get_class_loader_info,
    44: self.get_exception_message,
    45: self.get_exception_stack_trace,
    46: self.get_exception_type,
    47: self.print_exception,
    48: self.handle_exception,
    49: self.handle_error,
    50: self.print_stack_trace,
    51: self.flush_output,
    52: self.flush_error,
    53: self.exit_program,
    54: self.get_system_property,
    55: self.set_system_property,
    56: self.get_environment_variable,
    57: self.set_environment_variable,
    58: self.get_current_time,
    59: self.get_process_id,
    60: self.get_thread_id,
    61: self.get_thread_name,
    62: self.set_thread_name,
    63: self.get_thread_state,
    64: self.create_thread,
    65: self.stop_thread,
    66: self.join_thread,
    67: self.suspend_thread,
    68: self.resume_thread,
    69: self.is_thread_alive,
    70: self.get_thread_priority,
    71: self.set_thread_priority,
    72: self.get_thread_stack_size,
    73: self.set_thread_stack_size,
    74: self.get_thread_local_storage,
    75: self.set_thread_local_storage,
    76: self.get_thread_exception,
    77: self.set_thread_exception,
    78: self.get_thread_exception_clear,
    79: self.clear_thread_exception,
    80: self.get_heap_statistics,
    81: self.get_heap_memory,
    82: self.get_object_size,
    83: self.get_class_size,
    84: self.get_total_allocated_memory,
    85: self.get_used_memory,
    86: self.gc_collect,
    87: self.gc_pause,
    88: self.gc_info,
    89: self.get_alloc_block_size,
    90: self.get_gc_stats,
    91: self.get_alloc_stats,
    92: self.get_jvm_version,
    93: self.get_jvm_flags,
    94: self.get_jvm_properties,
    95: self.get_jvm_info,
    96: self.get_class_loader_statistics,
    97: self.get_class_loader_usage,
    98: self.get_gc_algorithm,
    99: self.get_gc_collection_count,
    100: self.get_gc_pause_time,
    101: self.get_gc_heap_size,
    102: self.get_gc_used_memory,
    103: self.get_gc_free_memory,
    104: self.get_gc_available_memory,
    105: self.get_gc_threads,
    106: self.get_gc_threads_info,
    107: self.get_gc_thread_state,
    108: self.get_gc_time_stamp,
    109: self.get_gc_thread_count,
    110: self.get_gc_memory_dump,
    111: self.get_gc_heap_dump,
    112: self.get_gc_compaction_stats,
    113: self.get_gc_metadata,
    114: self.get_gc_algorithm_stats,
    115: self.get_gc_policy,
    116: self.get_gc_logging,
    117: self.set_gc_logging,
    118: self.clear_gc_logging,
    119: self.get_gc_system_info,
    120: self.get_gc_thread_info,
    121: self.get_gc_pause_stats,
    122: self.get_gc_memory_stats,
    123: self.get_gc_threads_state,
    124: self.get_gc_dump_path,
    125: self.get_gc_collection_interval,
    126: self.get_gc_pause_interval,
    127: self.get_gc_pause_time_stats,
    128: self.get_gc_memory_type,
    129: self.get_gc_verbose,
    130: self.get_gc_usage,
    131: self.get_gc_log_level,
    132: self.get_gc_stats_detailed,
    133: self.get_gc_benchmark,
    134: self.get_gc_efficiency,
    135: self.get_gc_frequency,
    136: self.get_gc_size,
    137: self.get_gc_time_cost,
    138: self.get_gc_efficiency_ratio,
    139: self.get_gc_trigger,
    140: self.get_gc_throughput,
    141: self.get_gc_thread_time,
    142: self.get_gc_thread_count_stats,
    143: self.get_gc_object_count,
    144: self.get_gc_object_size,
    145: self.get_gc_object_allocations,
    146: self.get_gc_object_deallocations,
    147: self.get_gc_object_thresholds,
    148: self.get_gc_finalization,
    149: self.get_gc_cleanup,
    150: self.get_gc_deallocation,
    151: self.get_gc_allocation,
    152: self.get_gc_object_alignment,
    153: self.get_gc_object_properties,
    154: self.get_gc_object_tagging,
    155: self.get_gc_compaction,
    156: self.get_gc_object_compaction,
    157: self.get_gc_object_collection,
    158: self.get_gc_object_performance,
    159: self.get_gc_object_efficiency,
    160: self.get_gc_object_statistics,
    161: self.get_gc_type,
    162: self.get_gc_subtype,
    163: self.get_gc_class_name,
    164: self.get_gc_method_name,
    165: self.get_gc_method_type,
    166: self.get_gc_field_name,
    167: self.get_gc_field_type,
    168: self.get_gc_method_return_type,
    169: self.get_gc_field_descriptor,
    170: self.get_gc_method_descriptor,
    171: self.get_gc_type_descriptor,
    172: self.get_gc_object_class,
    173: self.get_gc_field_class,
    174: self.get_gc_method_class,
    175: self.get_gc_object_type,
    176: self.get_gc_object_size_stats,
    177: self.get_gc_object_pool_size,
    178: self.get_gc_object_pool_growth,
    179: self.get_gc_object_pool_shrink,
    180: self.get_gc_object_pool_efficiency,
    181: self.get_gc_object_pool_utilization,
    182: self.get_gc_object_pool_metrics,
    183: self.get_gc_object_pool_overhead,
    184: self.get_gc_object_pool_statistics,
    185: self.get_gc_object_pool_balance,
    186: self.get_gc_object_pool_efficiency_ratio,
    187: self.get_gc_object_pool_cleanup,
    188: self.get_gc_object_pool_deallocation,
    189: self.get_gc_object_pool_allocation,
    190: self.get_gc_object_pool_release,
    191: self.get_gc_object_pool_size_stats,
    192: self.get_gc_object_pool_growth_stats,
    193: self.get_gc_object_pool_shrink_stats,
    194: self.get_gc_object_pool_balance_stats,
    195: self.get_gc_object_pool_efficiency_stats,
    196: self.get_gc_object_pool_cleanup_stats,
197: self.get_gc_object_pool_deallocation_stats,
    198: self.get_gc_object_pool_allocation_stats,
    199: self.get_gc_object_pool_release_stats,
    200: self.get_gc_object_pool_size_summary,
    201: self.get_gc_object_pool_growth_summary,
    202: self.get_gc_object_pool_shrink_summary,
    203: self.get_gc_object_pool_balance_summary,
    204: self.get_gc_object_pool_efficiency_summary,
    205: self.get_gc_object_pool_cleanup_summary,
    206: self.get_gc_object_pool_deallocation_summary,
    207: self.get_gc_object_pool_allocation_summary,
    208: self.get_gc_object_pool_release_summary,
    209: self.get_gc_pool_metrics,
    210: self.get_gc_pool_utilization,
    211: self.get_gc_pool_overhead,
    212: self.get_gc_pool_balance,
    213: self.get_gc_pool_efficiency,
    214: self.get_gc_pool_cleanup,
    215: self.get_gc_pool_deallocation,
    216: self.get_gc_pool_allocation,
    217: self.get_gc_pool_release,
    218: self.get_gc_pool_size_stats,
    219: self.get_gc_pool_growth_stats,
    220: self.get_gc_pool_shrink_stats,
    221: self.get_gc_pool_balance_stats,
    222: self.get_gc_pool_efficiency_stats,
    223: self.get_gc_pool_cleanup_stats,
    224: self.get_gc_pool_deallocation_stats,
    225: self.get_gc_pool_allocation_stats,
    226: self.get_gc_pool_release_stats,
    227: self.get_gc_pool_size_summary,
    228: self.get_gc_pool_growth_summary,
    229: self.get_gc_pool_shrink_summary,
    230: self.get_gc_pool_balance_summary,
    231: self.get_gc_pool_efficiency_summary,
    232: self.get_gc_pool_cleanup_summary,
})

# - LOAD (determinate what parts of the ELF file get mapped into memory)
load_segments = [x for x in elf.iter_segments() if x.header.p_type == 'PT_LOAD']
 
for segment in load_segments:
    prot = UC_PROT_ALL
    self.emu.memory.mem_map(load_base + segment.header.p_vaddr, segment.header.p_memsz, prot)
    self.emu.memory.mem_write(load_base + segment.header.p_vaddr, segment.data())     self.emu.memory.mem_map这个是unicorn实例吗？如果是参数2是错误的必须是1000的倍数否则代码报错