function hookSign() {
  Java.perform(function () {
    let LibBili = Java.use("com.bilibili.nativelibrary.LibBili");
    LibBili["s"].implementation = function (sortedMap) {
      console.log(
        `LibBili.s is called: sortedMap=${sortedMap.entrySet().toArray()}`
      );
      let result = this["s"](sortedMap);
      console.log(`LibBili.s result=${result}`);
      return result;
    };
  });
}
setImmediate(hookSign);

function hook_RegisterNatives() {
  var symbols = Module.enumerateSymbolsSync("libart.so");
  var addrRegisterNatives = null;
  for (var i = 0; i < symbols.length; i++) {
    var symbol = symbols[i];

    //_ZN3art3JNI15RegisterNativesEP7_JNIEnvP7_jclassPK15JNINativeMethodi
    if (
      symbol.name.indexOf("art") >= 0 &&
      symbol.name.indexOf("JNI") >= 0 &&
      symbol.name.indexOf("RegisterNatives") >= 0 &&
      symbol.name.indexOf("CheckJNI") < 0
    ) {
      addrRegisterNatives = symbol.address;
      console.log("RegisterNatives is at ", symbol.address, symbol.name);

      if (addrRegisterNatives != null) {
        Interceptor.attach(addrRegisterNatives, {
          onEnter: function (args) {
            var env = args[0];
            var java_class = args[1];
            var class_name = Java.vm.tryGetEnv().getClassName(java_class);
            // console.log(class_name);
            // 筛选类
            var taget_class = "com.bilibili.nativelibrary.LibBili";
            if (class_name === taget_class) {
              console.log("\n[RegisterNatives] method_count:", args[3]);
              var methods_ptr = ptr(args[2]);

              var method_count = parseInt(args[3]);
              for (var i = 0; i < method_count; i++) {
                var name_ptr = Memory.readPointer(
                  methods_ptr.add(i * Process.pointerSize * 3)
                );
                var sig_ptr = Memory.readPointer(
                  methods_ptr.add(
                    i * Process.pointerSize * 3 + Process.pointerSize
                  )
                );
                var fnPtr_ptr = Memory.readPointer(
                  methods_ptr.add(
                    i * Process.pointerSize * 3 + Process.pointerSize * 2
                  )
                );

                var name = Memory.readCString(name_ptr);
                var sig = Memory.readCString(sig_ptr);
                var find_module = Process.findModuleByAddress(fnPtr_ptr);
                console.log(
                  "[RegisterNatives] java_class:",
                  class_name,
                  "name:",
                  name,
                  "sig:",
                  sig,
                  "fnPtr:",
                  fnPtr_ptr,
                  "module_name:",
                  find_module.name,
                  "module_base:",
                  find_module.base,
                  "offset:",
                  ptr(fnPtr_ptr).sub(find_module.base)
                );
              }
            }
          },
        });
      }
    }
  }
}

setImmediate(hook_RegisterNatives);