From 69b4ee5f0f5f91083bf1ffb6e4d12f275964a672 Mon Sep 17 00:00:00 2001
From: jackyin <648588267@qq.com>
Date: Wed, 26 Nov 2025 10:23:39 +0800
Subject: [PATCH] Create frida-wechat

---
 frida-wechat | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 frida-wechat

diff --git a/frida-wechat b/frida-wechat
new file mode 100644
index 0000000..aff0587
--- /dev/null
+++ b/frida-wechat
@@ -0,0 +1,32 @@
+注意点
+1. 需要让frida启动微信才能通过内存地址找到代码位置
+```
+MemoryAccessMonitor.enable(
+    {
+        base: ptr("0x60000173BCDA"),
+        size: 0x200  // buffer 大小
+    },
+    {
+        onAccess(details) {
+            console.log("Access by:", DebugSymbol.fromAddress(details.from));
+            console.log("Operation:", details.operation);
+        }
+    }
+);
+```
+
+2. 通过ce确定内存位置
+
+
+
+3. 可以看到打印日志
+```
+Access by: 0x10dc28ccc libGLESv2.dylib!0x250ccc (0x250ccc)
+Operation: read
+Access by: 0x10a08083c WeChat!0x580883c (0x10580883c)
+Operation: read
+7                  Access by: 0x18b233444 libsystem_malloc.dylib!nanov2_malloc
+Operation: read
+Access by: 0x10a08083c WeChat!0x580883c (0x10580883c)
+Operation: read
+```