前言

模拟用户的键盘点击

Nov 22 13:36:39 iPhone WeChat[3617] 
    
     : KNHooklog :-(id)initWithFrame:AndImage:(have 2 value)    return:(null)    value1:NSConcreteValue-->NSRect: {
   {0, 0}, {246, 42}}    value2:UIImage-->
     
          object:
      
            ##########################################
      
     
    

Nov 22 14:13:25 iPhone WeChat[3957] 
    
     : KNHooklog :-(void)numberKeyBoardClicked:(have 1 value)    return:(null)    value1:TPIDKeyboardButton-->
     
      >    object:
      
       ; layer = 
       
        >     ##########################################
       
      
     
    

WCPayOrderPayConfirmView

Nov 22 14:05:04 iPhone WeChat[3878] 
    
     : KNHooklog :-(void)showAnimation(have 0 value)    return:(null)    object:
     
      >     ##########################################
     
    

修改被保护的属性

Ivar ivar = class_getInstanceVariable(objc_getClass("TenpayPasswordCtrl"), "_pswView");   TenpayPasswordView  *_pswView = object_getIvar(self, ivar);    [_pswView SetInputNum:6];

WCPayTenpayPasswordCtrlItem

Nov 22 16:15:09 iPhone WeChat[4412] 
    
     : KNHooklog :-(void)passwordCtrlShouldChange:(have 1 value)    return:(null)    value1:TenpayPasswordCtrl-->
     
      >    object:
      
            ##########################################
      
     
    

Nov 22 16:26:18 iPhone WeChat[4537] 
    
     : KNHooklog :-(void)onPayBtnClick(have 0 value)    return:(null)    object:
     
      >     ##########################################
     
    

从这个方法获取启发

void -[TenpayPasswordCtrl numberKeyBoardClicked:](void * self, void * _cmd, void * arg2) {    stack[2043] = r4;    *((sp - 0x14) + 0xfffffffffffffffc) = r8;    r4 = self;    r5 = loc_e0b79c(arg2, @selector(tag), arg2) - 0x1;    if (r5 != 0x9) goto loc_890f90;

从WCPayOrderPayConfirmView一步一步的往下获取下一级属性