XPosed環(huán)境搭建

第一步：找到當(dāng)前activity

此處使用的adb命令

adb shell dumpsys activity top > activity_top.txt

也能看到View Hierarchy，整個(gè)view樹(shù)結(jié)構(gòu)
或者直接得到當(dāng)前activity

adb shell "dumpsys window | grep mCurrentFocus"

第二步：找到余額控件ID

monitor查看控件ID

查找id為ff3的16進(jìn)制值：

通過(guò)activity_top查看

com.robinhood.ticker.TickerView{46e2cf1 V.ED..... ........ 0,0-105,37 #7f092263 app:id/ff3}

在里面找到元素對(duì)應(yīng)的值，為十六進(jìn)制值。如上面結(jié)果中有這樣一行，可以看到id為'ff3'的值為十六進(jìn)制值7f092263

第三步：找到余額控件ID所在類

由于Mac的jadx比較卡，內(nèi)存為4G，修改為8G居然不生效？？？
我導(dǎo)出了源碼到AS，在AS全局搜索找到WcPayMoneyLoadingView

WcPayMoneyLoadingView

一路跟蹤發(fā)現(xiàn)setMoney方法，XPosed走起試試

public class XposedInit implements IXposedHookLoadPackage {

    @Override
    public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpparam) throws Throwable {
        XposedBridge.log("========test");
        if(lpparam.packageName.equals("com.tencent.mm")){
            String className = "com.tencent.mm.plugin.wallet_core.ui.view.WcPayMoneyLoadingView";
            XposedHelpers.findAndHookMethod(className, lpparam.classLoader, "setMoney", String.class, new XC_MethodHook() {
                @Override
                protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
                    super.beforeHookedMethod(param);
//                    param.args[0] = "11111";
                    XposedBridge.log("beforeHookedMethod");
                }

                @Override
                protected void afterHookedMethod(MethodHookParam param) throws Throwable {
                    super.afterHookedMethod(param);
                    XposedBridge.log("========afterHookedMethod");
//                    Activity activity = (Activity) ((View) param.thisObject).getContext();
//                    View view = activity.findViewById(0x7f092263);
//                    XposedHelpers.callMethod(view, "setText", "11111111");
                    XposedHelpers.callMethod(param.thisObject,"setNewMoney","100001");

                }
            });
        }

    }
}

可以在beforeHookedMethod直接修改setmoney的參數(shù)
也可以找到那個(gè)控件直接settext
還可以直接反射調(diào)用setNewMoney

success

)

成了

參考文章：
https://juejin.cn/post/6850037258754457614#heading-8
http://www.itdecent.cn/p/35246dfe4cb0