定位Wechat关键函数

• 定位发包函数及类型

➜  find . -type f|xargs grep -n 'worker thread has not been set'
./classes-out/com/tencent/mm/ai/p.smali:1470:    const-string/jumbo v3, "worker thread has not been set"

.method public final a(Lcom/tencent/mm/ai/m;I)Z

数据包基类: com/tencent/mm/ai/m
发包函数: com/tencent/mm/ai/p.a()

• 定位获取发包对象的方法

find . -type f|xargs grep 'model'|grep '()Lcom/tencent/mm/ai/p;'

./classes9-out/com/tencent/mm/plugin/label/ui/ContactLabelEditUI.smali:    invoke-static { }, Lcom/tencent/mm/model/aw;->Rc()Lcom/tencent/mm/ai/p;

com/tencent/mm/model/aw -> Rc()